HIPAA & 42 CFR Part 2 Notice of Privacy Practice

Last updated: April 26, 2026

Buffalo Plains Recovery is committed to protecting the privacy and security of your health information.

Your privacy is protected under HIPAA and federal substance use confidentiality laws (42 CFR Part 2).

This Notice describes how we may use and disclose your information, and your rights under both:

• Health Insurance Portability and Accountability Act (HIPAA), and
• 42 CFR Part 2, which provides additional protections for substance use disorder (SUD) treatment records.

Special Protections for Substance Use Disorder Records (42 CFR Part 2)

Records related to your substance use disorder diagnosis, treatment, or referral are protected under federal law (42 CFR Part 2).

These records cannot be disclosed without your written consent, except in limited circumstances permitted by law, such as:

• Medical emergencies
• Court orders that meet strict federal requirements
• Qualified service organizations (e.g., billing or administrative support)
• Certain audits and program evaluations

Any disclosure made with your consent must include a statement prohibiting redisclosure, unless further disclosure is expressly permitted by law.

How We May Use and Disclose Your Information (HIPAA)

We may use and disclose your protected health information (PHI) for:

Treatment

To coordinate your care with healthcare providers involved in your treatment.

Payment

To bill and receive payment from insurance companies, Medicaid, Medicare, or other payers.

Healthcare Operations

To manage our programs, improve quality of care, train staff, and conduct administrative activities.

As Required by Law

We may disclose information when required by federal or state law, including valid court orders or legal proceedings.

Your Rights Regarding Your Health Information

You have the following rights:

• Right to Access
  Request access to and copies of your medical records.
• Right to Amend
  Request corrections to inaccurate or incomplete information.
• Right to an Accounting of Disclosures
  Request a list of certain disclosures of your information.
• Right to Request Restrictions
  Request limits on how your information is used or disclosed.
• Right to Confidential Communications
  Request that we contact you in a specific way or location.
• Right to Revoke Authorization
  Withdraw your written consent at any time (except where already relied upon).
• Right to File a Complaint
  File a complaint without fear of retaliation.

Our Legal Duties

Buffalo Plains Recovery is required to:

• Maintain the privacy and security of your protected health information
• Provide you with this Notice
• Follow the terms currently in effect
• Notify you in the event of a breach of unsecured protected health information

We also comply with 42 CFR Part 2 confidentiality requirements for substance use disorder records.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services.

We will not retaliate against you for filing a complaint.

File with HHS:
https://www.hhs.gov/hipaa/filing-a-complaint/index.html

Contact Information

For questions, requests, or complaints, contact:

Privacy and Security Officer: Ryan Letterman
Buffalo Plains Recovery
405 E Fairlane Dr
Rapid City, SD 57701
Email: info@buffaloplainsrecovery.com