Privacy & Notice of Privacy Practices

Exelixis ABA Therapy and Behavior Consulting LLC is committed to protecting the privacy and confidentiality of your and your child’s protected health information (PHI). This Notice of Privacy Practices describes how we may use and disclose your information and outlines your rights under the Health Insurance Portability and Accountability Act (HIPAA).

How We May Use and Disclose Your Information

We may use and disclose your child’s protected health information for the following purposes without requiring additional authorization:

Treatment

We may use and share your child’s information to provide, coordinate, or manage ABA services. This may include communication with other healthcare providers, therapists, educators, or professionals involved in your child’s care.

Payment

We may use and disclose your child’s information to bill and receive payment from insurance companies or other third-party payers. This includes submitting claims, verifying eligibility, and obtaining prior authorizations.

Healthcare Operations

We may use your child’s information for administrative and operational purposes, such as quality assurance, staff training and supervision, licensure, and compliance activities.

Additional Uses and Disclosures

We may also use or disclose your child’s information in the following situations without your authorization:

• As required by law: Including mandatory reporting of suspected child abuse or neglect to the NJ Division of Child Protection and Permanence (DCPP) under N.J.S.A. 9:6-8.10.
• Public health and safety: To prevent or control disease, injury, or disability, or to report to public health authorities as required.
• Legal proceedings: To comply with a valid court order, subpoena, or law enforcement request as required by law.
• Serious threats to health or safety: To prevent or lessen a serious and imminent threat to the health or safety of a person or the public.
• Business associates: To vendors and service providers who perform services on our behalf under HIPAA-compliant Business Associate Agreements (BAAs), including our secure email and electronic signature platforms.

Any other use or disclosure of your child’s protected health information not described in this Notice will require your specific written authorization. You may revoke that authorization at any time in writing.

Minimum Necessary Standard

Exelixis ABA Therapy and Behavior Consulting LLC makes reasonable efforts to use, disclose, and request only the minimum amount of protected health information necessary to accomplish the intended purpose.

Your Rights Regarding Your Child’s Information

You have the following rights with respect to your child’s protected health information. To exercise any of these rights, please contact our Privacy Officer.

Our Responsibilities

Exelixis ABA Therapy and Behavior Consulting LLC is required to:

• Maintain the privacy and security of your child’s protected health information
• Provide you with this Notice describing our legal duties and privacy practices
• Notify you without unreasonable delay, and no later than 60 days after discovery, if there is a breach of your child’s unsecured protected health information, in accordance with the HIPAA Breach Notification Rule (45 CFR §164.400 et seq.)
• Follow the terms of the Notice currently in effect
• Not retaliate against you for exercising your rights or filing a complaint

We reserve the right to update this Notice at any time. Updated notices will be available in our office and on this website.

How to File a Privacy Complaint

If you believe your privacy rights have been violated, you may file a complaint with Exelixis ABA directly or with the federal government. There will be no retaliation for filing a complaint.

Website Privacy Notice

This section covers how information collected through this website is handled, separate from the HIPAA Notice above.