Notice of Privacy Practices

Combined HIPAA Notice of Privacy Practices and 42 CFR Part 2 Patient Notice

After Action by AM Healthcare
Effective Date: May 19, 2026

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

After Action provides behavioral health, mental health, addiction treatment, detox, and recovery support services for first responders. We understand that privacy is central to your decision to seek care. We are committed to protecting your health information and to using or sharing it only as allowed by law and by this notice.

Privacy Contact

Arthur Mogilevski
After Action by AM Healthcare
19270 Calahan St
Northridge, CA 91324
Phone: 866-645-5672
Email: arthur@afteraction.care
Website: https://afteraction.care

Who must follow this notice

This notice applies to After Action by AM Healthcare, its treatment programs, facilities, workforce members, employees, contractors, trainees, volunteers, medical staff, therapists, case managers, admissions team members, billing personnel, and other people or organizations who help us provide care and services under appropriate privacy agreements.

This notice applies to protected health information that we create, receive, maintain, or transmit about you, including information gathered through admissions, phone calls, website forms, insurance verification, assessments, treatment, detox services, therapy, medication management, case management, billing, aftercare planning, and related communications.

Because After Action provides substance use disorder services, certain records may also be protected by the federal substance use disorder confidentiality law, 42 U.S.C. 290dd-2 and 42 CFR Part 2. When HIPAA, Part 2, California law, or another law gives your information stronger protection, we follow the stronger protection.

Your rights

When it comes to your health information, you have important rights. This section explains those rights and some of our responsibilities.

Get an electronic or paper copy of your record

You may ask to inspect or receive a copy of medical, billing, and other health records we maintain about you and use to make decisions about your care. We will usually provide access or a copy within 30 days of your request. We may charge a reasonable, cost-based fee for copies, mailing, or supplies.

In limited situations, we may deny access to certain information, such as psychotherapy notes kept separately from the medical record or information prepared for a legal proceeding. If we deny any part of your request, we will explain the reason in writing and tell you whether you may request a review.

Ask us to correct your record

You may ask us to correct health information about you that you believe is incorrect or incomplete. We may deny the request in certain situations, but we will tell you why in writing, usually within 60 days.

Request confidential communications

You may ask us to contact you in a specific way or at a specific location, such as a personal phone number, a secure email address, or a different mailing address. We will agree to reasonable requests.

Ask us to limit what we use or share

You may ask us not to use or share certain health information for treatment, payment, or health care operations. We are not always required to agree, especially if the restriction would affect your care, but we will consider the request.

If you pay out of pocket in full for a specific service and ask us not to share information about that service with your health plan for payment or health care operations, we will agree unless a law requires us to share it.

Get a list of certain disclosures

You may ask for a list, called an accounting, of certain disclosures we made of your health information during the six years before your request. The list will not include all disclosures, such as disclosures for treatment, payment, health care operations, or disclosures you authorized, except where the law requires otherwise. We will provide one accounting in a 12-month period for free and may charge a reasonable, cost-based fee for additional requests.

Get a paper copy of this notice

You may ask for a paper copy of this notice at any time, even if you agreed to receive it electronically.

Choose someone to act for you

If you give someone medical power of attorney or if someone is your legal guardian or personal representative under applicable law, that person may exercise your rights and make choices about your health information. We will take reasonable steps to confirm the person's authority before acting.

Revoke an authorization or consent

If you give us written permission to use or share your information, you may revoke that permission in writing at any time. We will stop future uses or disclosures covered by the revocation, except to the extent we already relied on your permission or the law allows continued use or disclosure.

File a complaint

You may complain if you believe we have violated your privacy rights. You may contact the After Action Privacy Contact listed above.

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights. OCR accepts HIPAA complaints and, beginning February 16, 2026, complaints about violations of 42 CFR Part 2. You can file online at https://www.hhs.gov/hipaa/filing-a-complaint/index.html or by contacting:

U.S. Department of Health and Human Services
Office for Civil Rights
200 Independence Avenue, S.W.
Washington, D.C. 20201
Phone: 1-877-696-6775

We will not retaliate against you for filing a complaint.

Your choices

For certain health information, you can tell us your choices about what we share. If you have a preference, tell us what you want us to do. We will follow your instructions when the law allows and requires us to do so.

Family, friends, and others involved in your care

You may tell us whether we may share information with family members, close friends, peer supports, chaplains, sponsors, or others involved in your care or payment for your care. If you cannot tell us your preference, we may share limited information if we believe it is in your best interest and the law allows it.

First responder confidentiality

We will not tell your employer, agency, department, union, licensing board, coworkers, or command staff that you contacted us, sought admission, received treatment, or received substance use disorder services unless you give us written permission or the law specifically permits or requires the disclosure.

If your care involves an employee assistance program, employer-sponsored benefit, workers' compensation matter, fitness-for-duty process, court order, or agency referral, ask us what information, if any, may need to be shared before you sign any authorization or consent.

Uses and disclosures that usually require written permission

We generally need your written permission before we:

Use or disclose your information for marketing when HIPAA requires authorization.
Sell your health information.
Use or disclose most psychotherapy notes.
Use or disclose substance use disorder treatment records in ways not otherwise permitted by Part 2.
Share your information with your employer, agency, union, department, command staff, licensing board, or the media.
Use your name, image, voice, story, testimonial, photograph, or video for publicity, social media, advertising, fundraising, training, or public-facing purposes.

If we conduct fundraising, we will tell you how to opt out of future fundraising communications.

How we may use and disclose your health information

The law allows or requires us to use and share your health information in certain ways. For substance use disorder records protected by Part 2, we will follow the stricter Part 2 rules described in this notice.

Treatment

We may use and share health information to provide, coordinate, or manage your care. This may include sharing information with therapists, physicians, psychiatrists, nurses, detox staff, case managers, pharmacies, laboratories, hospitals, emergency providers, aftercare providers, or other professionals involved in your treatment.

For Part 2 records, we generally need your written consent for disclosures for treatment unless Part 2 permits the disclosure without consent, such as in a medical emergency or another limited situation allowed by law.

Payment

We may use and share health information to bill and collect payment for services. This may include insurance verification, benefit coordination, claims submission, utilization review, medical necessity review, appeals, collections, and communications with health plans or other payers.

For Part 2 records, a single written consent may authorize uses and disclosures for treatment, payment, and health care operations, unless and until you revoke that consent.

Health care operations

We may use and share health information to operate our programs and improve care. This may include quality improvement, staff training, licensing, credentialing, audits, compliance, case review, care coordination, business planning, legal services, technology support, and customer service.

We may share information with business associates, qualified service organizations, and vendors who perform services for us. They must protect your information through written agreements or other legally required safeguards.

Other ways we may use or disclose information

We may use or disclose health information without your written permission when the law allows or requires it. These uses and disclosures may be subject to additional limits under HIPAA, Part 2, California law, or other applicable law.

Public health and safety

We may share information for public health activities, to report certain communicable diseases, to report suspected abuse, neglect, or domestic violence, to prevent or reduce a serious and imminent threat to health or safety, or to comply with other public health or safety laws.

Health oversight and licensing

We may disclose information to health oversight agencies for activities authorized by law, such as audits, investigations, inspections, licensure, certification, or compliance reviews.

Workers' compensation and other benefit programs

We may disclose information as authorized by workers' compensation or similar laws. For Part 2 records and certain mental health records, additional consent or a specific legal requirement may be needed.

Law enforcement, court orders, and legal proceedings

We may disclose information for law enforcement or legal proceedings only as permitted or required by law. Substance use disorder records protected by Part 2 have special protections and generally may not be used or disclosed in civil, criminal, administrative, or legislative proceedings against you unless you give written consent or a court issues a Part 2-compliant order after the required legal process.

Medical emergencies

We may disclose information, including Part 2 records, to medical personnel when necessary to treat a bona fide medical emergency, as allowed by law.

Coroners, medical examiners, funeral directors, and organ donation

We may disclose information to coroners, medical examiners, funeral directors, or organ procurement organizations as allowed by law.

Research

We may use or disclose information for research only when allowed by law, such as with your written authorization or approval from an institutional review board or privacy board. Part 2 records have additional research disclosure requirements.

Compliance with the law

We will share information when federal, state, or local law requires it, including with the U.S. Department of Health and Human Services if it needs to determine whether we are complying with federal privacy law.

Special protections for substance use disorder records

Federal law protects the confidentiality of substance use disorder patient records. These records are often called Part 2 records. Part 2 applies to federally assisted programs that provide substance use disorder diagnosis, treatment, or referral for treatment.

If your records are protected by Part 2:

We generally may not disclose information that identifies you as having or having had a substance use disorder unless you give written consent or Part 2 specifically permits the disclosure.
Your written consent may allow future uses and disclosures of Part 2 records for treatment, payment, and health care operations. You may revoke that consent in writing, except to the extent we already relied on it.
A HIPAA covered entity or business associate that receives Part 2 records under your treatment, payment, and health care operations consent may redisclose those records as allowed by HIPAA, but the records may not be used or disclosed in legal proceedings against you unless Part 2 permits it.
We may disclose Part 2 records without consent in limited circumstances allowed by law, such as medical emergencies, research, audits and evaluations, qualified service organization activities, crimes on program premises or against program personnel, child abuse reporting, or a valid Part 2 court order.
We may not require you to waive your right to confidentiality as a condition of treatment, payment, enrollment, or eligibility for services.
If a breach of unsecured Part 2 records occurs, we will provide breach notification as required by law.

Suspected violations of Part 2 may be reported to us or to the U.S. Department of Health and Human Services Office for Civil Rights.

Special protections for psychotherapy notes and behavioral health information

Psychotherapy notes are notes recorded by a mental health professional documenting or analyzing the contents of a private counseling session or group, joint, or family counseling session, and kept separate from the rest of the medical record. We generally need your written authorization to use or disclose psychotherapy notes, except for limited uses or disclosures allowed by HIPAA, such as use by the originator of the notes for treatment, certain training activities, legal defense, oversight by HHS, or as otherwise required or permitted by law.

Behavioral health, mental health, substance use disorder, HIV/AIDS, genetic, reproductive health, and other sensitive information may receive additional protections under federal or state law. We will follow the law that provides the stronger privacy protection.

Our responsibilities

We are required by law to:

Maintain the privacy and security of your protected health information.
Follow the duties and privacy practices described in this notice.
Give you a copy of this notice.
Notify you if a breach occurs that may have compromised the privacy or security of your unsecured health information.
Avoid using or sharing your information in ways not described in this notice unless you authorize us in writing or the law allows or requires it.
Not retaliate against you for exercising your privacy rights or filing a complaint.

We train our workforce on privacy and confidentiality and limit access to health information to people who need it to perform their role.

Changes to this notice

We may change this notice and our privacy practices. If we make a material change, the revised notice will apply to all information we maintain, including information we created or received before the change. We will post the current notice on our website and make paper copies available on request.

Questions

If you have questions about this notice, want to exercise your rights, want a paper copy, or want to file a privacy complaint, contact:

Privacy Officer or Designated Privacy Contact
After Action by AM Healthcare
19270 Calahan St
Northridge, CA 91324
Phone: 866-645-5672
Email: arthur@afteraction.care