Notice of Privacy Practices
Effective date: October 6, 2026
YOUR INFORMATION. YOUR RIGHTS. OUR RESPONSIBILITIES
This Notice of Privacy Practices is provided to you by Daniel Monaghan, D.C., PLLC (hereinafter “we” or “company”) as a requirement of the Health Insurance Portability and Accountability Act (HIPAA). It describes how we may use or disclose your protected health information, with whom that information may be shared, and the safeguards we have in place to protect it. Please review it carefully.
You will be asked to provide a signed acknowledgement of receipt of this Notice. The delivery of your health care services will in no way be conditioned upon your signed acknowledgement. If you decline to provide a signed acknowledgement, we will continue to provide your treatment and will use and disclose your protected health information for treatment, payment, and health care operations when necessary.
Our Responsibilities. We are required by law to maintain the privacy and security of your protected health information such as your name, age, social security number, and health care information. We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information. We must follow the duties and privacy practices described in this notice and give you a copy of it. We will not use or share your information other than as described herein unless you tell us we can in writing. If you tell us we can, you may change your mind at any time. Let us know in writing if you change your mind.
Changes to the Terms of this Notice. We can change the terms of this notice, and the changes will apply to all information we have about you. The new notice will be available upon request, in our office, and on our web site.
Permitted Uses: Treatment, Payment and Healthcare Operations. We may use and disclose protected health information for treatment, payment and healthcare operations. Treatment examples include but are not limited to requested life insurance or sports physicals, referral to nursing homes, or referrals to other providers for treatment. Payment examples include but are not limited to completing a claim form to obtain payment from an insurer or activities that we might undertake to determine eligibility or coverage for benefits. Healthcare operations include, but are not limited to, investigations, implementing compliance programs, oversight or staff performance reviews, and internal quality control assurance including auditing of records.
Other Permitted Uses. Company is permitted or required to use or disclose protected health information without the individual’s written authorization in certain circumstances. These include the following:
- Required Uses and Disclosures. By law, we must disclose your health information to you unless it has been determined by a competent medical authority that it would be harmful to you. We must also disclose health information to the Secretary of the Department of Health and Human Services for investigations or determinations of our compliance with laws on the protection of your health information. We may use or disclose your PHI if a law or regulation requires the use or disclosure.
- Business Associates. We will share your PHI with third party “business associates” who perform various activities for us, such as billing services. Our business associates will be required to sign a Business Associate Agreement, and they will be required to protect your health information.
- Contacting You. We may use or disclose your PHI, as necessary, to contact you to remind you of your appointment. We may call you by name in the waiting room when your health care provider is ready to see you.
- Treatment Alternatives. We may use or disclose your PHI to provide you with information about treatment alternatives or other health-related benefits and services that might interest you. For example, your name and address may be used to send you a newsletter about the services we offer. We may also send you information about products or services that might benefit you.
- Public Health. We may disclose your PHI to a public health authority who is permitted by law to collect or receive the information. We may notify the appropriate government authority if we believe a patient has been a victim of abuse, neglect, or domestic violence.
- Communicable Diseases. We may disclose your PHI, if authorized by law, to a person who might have been exposed to a communicable disease or might otherwise be at risk of contracting or spreading the disease or condition.
- Health Oversight. We may disclose PHI to a health oversight agency for activities authorized by law, such as audits, investigations and inspections.
- Food and Drug Administration. We may disclose your protected health information to a person or company required by the FDA to do the following: report adverse events, product defects, or problems and biologic product deviations; track products; enable product recalls; make repairs or replacements; or conduct post-marketing surveillance as required.
- Legal Proceedings. We may disclose PHI during any judicial or administrative proceeding, in response to a court order or administrative tribunal (if such a disclosure is expressly authorized), and in certain conditions in response to a subpoena, discovery request, or other lawful process.
- Law Enforcement. We may disclose PHI for law enforcement purposes, including responses to legal proceedings, information requests for identification and location, circumstances pertaining to victims of a crime, deaths suspected from criminal conduct, crimes occurring at our office site, and medical emergencies believed to result from criminal conduct.
- Coroners, Funeral Directors and Organ Donations. We may disclose PHI to coroners or medical examiners for identification to determine the cause of death or for the performance of other duties authorized by law. We may also disclose PHI to funeral directors if authorized by law. PHI may be used and disclosed for cadaveric organ, eye, or tissue donations.
- We may disclose your PHI to researchers when authorized by law, for example, if their research has been approved by an institutional review board that has reviewed the research proposal and established protocols to ensure the privacy of your PHI.
- Criminal Activity. Under applicable federal and state laws, we may disclose your PHI if we believe that its use or disclosure is necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public. We may also disclose PHI if it is necessary for law enforcement authorities to identify or apprehend an individual.
- Military Activity and National Security. When the appropriate conditions apply, we may use or disclose PHI of individuals who are Armed Forces personnel (1) for activities believed necessary or appropriate by military command authorities to ensure the proper execution of the military mission including determination of fitness for duty; (2) for determination by the Department of Veterans Affairs of your eligibility for benefits; or (3) to a foreign military authority if you are a member of that foreign military service. We may also disclose your PHI to authorized federal officials for conducting national security and intelligence activities including protective services to the President or others.
- Workers’ Compensation. We may disclose your PHI to comply with workers’ compensation laws and other similar legally established programs. We will act consistently with the law of the Commonwealth of Pennsylvania and will make disclosures following such laws.
- We may use or disclose your PHI if you are an inmate of a correctional facility, and we created or received your PHI information while providing care to you. This disclosure would be necessary (1) for the institution to provide you with care, (2) for your health and safety or that of others, or (3) for the safety and security of the correctional institution.
- Parental Access. We may use or disclose PHI to parents, guardians, and people acting in a similar legal status. We will act consistently with the law of the Commonwealth of Pennsylvania and will make disclosures following such laws.
- Family Members. Unless you object, we may release protected health information about you to a friend or family member who is involved in your medical care. We may also give information to someone who helps to pay for your care. We may also tell your family or friends the condition that you are in. You will be provided with a form to list specific people who we may speak to regarding your medical care. In addition, we may disclose protected health information about you to an entity assisting in a disaster relief effort so that your family can be notified about your condition, status and location.
- Fundraising. The Company may use protected health information about you to contact you to raise money for our practice and its operations. We may disclose protected health information to a related foundation so that the foundation may contact you in raising money. We only would release contact information, such as your name, address and phone number and the dates you received treatment or services. If you do not want us to contact you for fundraising efforts, you must notify us in writing.
Authorization Required
The Company will not make any other use or disclosure of your protected health information without your written and valid authorization. Such use or disclosure must be consistent with such authorization. Authorization is specifically required for the following:
- Psychotherapy Notes. We must obtain an authorization for any use or disclosure of psychotherapy notes, except: to carry out the following treatment, payment, or health care operations: (A) use by the originator of the psychotherapy notes for treatment; (B) use or disclosure by the covered entity for its own training programs in which students, trainees, or practitioners in mental health learn under supervision to practice or improve their skills in group, joint, family, or individual counseling; or (C) use or disclosure by the covered entity to defend itself in a legal action or other proceeding brought by the individual.
- We must obtain authorization for any use or disclosure of protected health information for marketing, except if the communication is in the form of: (A) A face-to-face communication made by a covered entity to an individual; or (B) A promotional gift of nominal value provided by the covered entity. If marketing involves financial remuneration to us from a third party, the authorization must state that such remuneration is involved.
- Sale of protected health information. We must obtain authorization for any disclosure of protected health information which is a sale of protected health information. The authorization must state that the disclosure will result in remuneration to the covered entity.
Revoking Authorization. You may revoke the authorization at any time provided that the revocation is in writing, except to the extent that: (A) we have not taken action in reliance thereon or (B) if the authorization was obtained as a condition of obtaining insurance coverage, other law provides the insurer with the right to contest a claim under the policy or the policy itself.
Patient Rights. Patients have been granted individual rights under HIPAA. These include the following:
- Get an electronic or paper copy of your medical record. You can ask to see or get an electronic or paper copy of your medical record and other health information we have about you. Ask us how to do this. We will provide a copy or a summary of your health information, usually within 30 days of your request. We may charge a reasonable, cost-based fee.
- Ask us to correct your medical record. You can ask us to correct health information about you that you think is incorrect or incomplete. Ask us how to do this. We may say “no” to your request, but we’ll tell you why in writing within 60 days.
- Request confidential communications. You can ask us to contact you in a specific way (for example, home or office phone) or to send mail to a different address. We will say “yes” to all reasonable requests. Requests must be in writing and state specifically how or where you wish to be contacted.
- Ask us to limit what we use or share. You can ask us not to use or share certain health information for treatment, payment, or our operations. We are not required to agree to your request, and we may say “no” if it would affect your care. If you pay for a service or health care item out-of-pocket in full, you can ask us not to share that information for the purpose of payment or our operations with your health insurer. We will say “yes” unless a law requires us to share that information.
- Get a list of those with whom we’ve shared information. You can ask for a list (accounting) of the times we’ve shared your health information for six years prior to the date you ask, who we shared it with, and why. We will include all the disclosures except for those about treatment, payment, and health care operations, and certain other disclosures (such as any you asked us to make). We’ll provide one accounting a year for free but will charge a reasonable, cost-based fee if you ask for another one within 12 months.
- Get a copy of this privacy notice. You can ask for a paper copy of this notice at any time, even if you have agreed to receive the notice electronically. We will provide you with a paper copy promptly.
- Choose someone to act for you. If you have given someone medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your health information. We will make sure the person has this authority and can act for you before we take any action.
- File a complaint if you feel your rights are violated. You can complain if you feel we have violated your rights by contacting us using the contact information at the end of this notice. You can file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by sending a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201, calling 1-877-696-6775, or visiting www.hhs.gov/ocr/privacy/hipaa/complaints/. We will not retaliate against you for filing a complaint.
You will be asked to outline or define specific instances or information that you would like kept completely confidential (between you and us). If you have any questions regarding this Notice of Privacy Practices, please do not hesitate to contact us for more information or clarification. You may contact the following:
Name: Daniel Monaghan, D.C.
Practice: Daniel Monaghan, D.C., PLLC, 3070 Bristol Pike, Bldg 2, Suite 118, Bensalem, PA 19020
Phone: 267-606-0011
Email: drdanielmonaghan@gmail.com
The effective date of this notice is October 6, 2026.