HIPAA Compliance

How we protect your health information

Your Privacy Rights Under HIPAA

The Health Insurance Portability and Accountability Act (HIPAA) gives you rights over your health information and sets rules for who can look at and receive it.

Sober Resources is committed to protecting the privacy and security of your health information in compliance with HIPAA regulations.

What is HIPAA?

The Health Insurance Portability and Accountability Act (HIPAA) is a federal law that:

  • Gives you rights over your health information
  • Sets rules and limits on who can look at and receive your health information
  • Requires healthcare organizations to protect the privacy and security of your information

How HIPAA Applies to Our Services

Important distinction: Sober Resources operates as a referral service, not a healthcare provider. However, when we handle health-related information on your behalf, we take HIPAA-level precautions to protect your privacy.

When we refer you to treatment facilities, those facilities are covered entities under HIPAA and must follow all HIPAA rules.

Your Rights Under HIPAA

1. Right to Access

You have the right to inspect and obtain a copy of your health information that we maintain about you.

2. Right to Correction

If you believe information we have about you is incorrect or incomplete, you may request that we amend it.

3. Right to Confidential Communications

You can request that we communicate with you about your health information in a specific way (for example, at a particular phone number or address).

4. Right to Restrictions

You have the right to request restrictions on certain uses and disclosures of your information.

5. Right to an Accounting of Disclosures

You can request a list of certain disclosures we have made of your health information.

6. Right to a Paper Copy

You have the right to obtain a paper copy of this notice upon request.

How We Protect Your Information

Technical Safeguards

  • Encryption of data in transit using TLS/SSL
  • Secure servers with firewalls
  • Regular security updates and patches
  • Access controls and authentication

Administrative Safeguards

  • Privacy officer responsible for HIPAA compliance
  • Staff training on privacy and security
  • Business associate agreements with partners
  • Incident response procedures

Physical Safeguards

  • Secure data centers
  • Access controls to physical locations
  • Proper disposal of physical records

When We May Share Your Information

We may disclose your health information:

  • To treatment facilities: With your consent, to coordinate your care
  • To business associates: Partners who help us operate (under contract)
  • For public health: Required reporting of certain conditions
  • For law enforcement: As required by law or court order
  • To prevent harm: To avert a serious threat to health or safety

Complaints

If you believe your privacy rights have been violated, you may file a complaint with:

  • Sober Resources Privacy Officer
  • U.S. Department of Health and Human Services Office for Civil Rights

We will not retaliate against you for filing a complaint.

Changes to This Notice

We reserve the right to change this notice and our privacy practices. Changes will apply to all information we maintain.

Contact Information

Privacy Officer
Sober Resources
Email: privacy@soberresources.org
Phone: 607-218-2180
Address: 51 Port Watson St, Cortland, NY 13045

Effective Date: January 15, 2026
This notice describes how medical information about you may be used and disclosed and how you can get access to this information.