Canopy Children’s Solutions
NOTICE OF PRIVACY PRACTICES
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Effective date: February 16, 2026
Your Information. Your Rights. Our Responsibilities. This Notice explains how we use and share your health information and describes your rights.
Your Rights
Get an electronic or paper copy of your medical record: You can ask to see or get a copy of your medical record and other health information we have about you. We will provide a copy or a summary, usually within 30 days of your request. We may charge a reasonable, cost‑based fee.
Ask us to correct your medical record: You can ask us to correct health information about you that you think is incorrect or incomplete. We may say no, but we will tell you why in writing within 60 days.
Request confidential communications: You can ask us to contact you in a specific way (for example, home or office phone) or to send mail to a different address. We will say yes to all reasonable requests.
Ask us to limit what we use or share: You can ask us not to use or share certain health information for treatment, payment, or our operations. We are not required to agree, and we may say no if it would affect your care. If you pay for a service or health care item out of pocket in full, you can ask us not to share that information with your insurer for payment or operations unless the law requires us to share it.
Get a list of those with whom we have shared information: You can ask for an accounting of disclosures of your health information for six years prior to your request, who we shared it with, and why. We will provide one accounting a year for free; we may charge a reasonable, cost‑based fee for additional requests within 12 months.
Get a copy of this Notice: You can ask for a paper copy of this Notice at any time, even if you agreed to receive it electronically. We will provide a paper copy promptly.
Choose someone to act for you: If you have given someone medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your health information. We will make sure the person has this authority before we take any action.
File a complaint if you feel your rights are violated: You can complain to us using the contact information at the end of this Notice. You can also file a complaint with the U.S. Department of Health & Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.
Your Choices
For certain health information, you can tell us your choices about what we share. If you have a clear preference for how we share your information in the situations below, tell us and we will follow your instructions when permitted by law.
In these cases, you have both the right and choice to tell us to:
- Share information with your family, close friends, or others involved in your care
- Share information in a disaster relief situation
- Include your information in a facility directory (if applicable)
- Contact you for fundraising efforts (you can tell us not to contact you again)
In these cases we never share your information unless you give us written permission:
- Marketing purposes
- Sale of your information
- Most sharing of psychotherapy notes
How do we typically use or share your health information?
Treat you: We can use your health information and share it with other professionals who are treating you.
Run our organization: We can use and share your health information to run our organization, improve your care, and contact you when necessary.
Bill for your services: We can use and share your health information to bill and get payment from health plans or other entities.
How else can we use or share your health information?
We are allowed or required to share your information in other ways—usually in ways that contribute to the public good, such as public health and research. We must meet many conditions in the law before we can share your information for these purposes.
Help with public health and safety issues:
- Preventing disease
- Helping with product recalls
- Reporting adverse reactions to medications
- Reporting suspected abuse, neglect, or domestic violence
- Preventing or reducing a serious threat to anyone’s health or safety
Do research:
We may use or share your health information for research purposes. Research helps us improve care, evaluate programs, and develop new treatments and services. If we use information for research, it will be de‑identified so that it does not identify you directly.
When required by law, research projects must be reviewed and approved by a privacy board or an institutional review board (IRB) to ensure that the privacy of your health information is protected. In many cases, information used for research will be de‑identified so that it does not identify you directly.
Substance use disorder (SUD) records receive additional protections under federal law (42 U.S.C. § 290dd‑2 and 42 CFR Part 2). We generally will not use or disclose SUD records for research without your written consent, unless a specific legal exception applies under federal law.
Comply with the law:
We will share information about you if federal or state laws require it, including with HHS to ensure compliance with privacy laws.
Respond to organ and tissue donation requests:
Work with a medical examiner or funeral director:
Address workers’ compensation, law enforcement, and other government requests:
- For workers’ compensation claims
- For law enforcement purposes or with a law enforcement official
- With health oversight agencies for activities authorized by law
- For special government functions such as military, national security, and presidential protective services
Respond to lawsuits and legal actions:
- We can share health information about you in response to a court or administrative order, or in response to a subpoena as permitted by law.
Special Privacy Protections for Substance Use Disorder (SUD) Records (42 CFR Part 2)
Health records for programs that create, receive, maintain, or transmit records related to substance use disorder treatment are protected by federal law (42 U.S.C. 290dd-2 and 42 CFR Part 2) in addition to HIPAA. Part 2 gives your records in these programs extra privacy protections beyond HIPAA.
In general, we may not use or disclose Part 2 records without your specific written consent. Unlike other health information, Part 2 records usually cannot be disclosed for treatment, payment, or health care operations without your written consent, unless a specific legal exception applies.
Legal proceedings: Part 2 records have special protections in court and other legal proceedings. We generally cannot disclose Part 2 records without your written consent or a court order that meets Part 2 requirements.
Redisclosure: If we disclose your Part 2 information with your consent, the recipient is prohibited from redisclosing the information unless further disclosure is expressly permitted by Part 2 or other applicable law.
We will include a notice of this prohibition with any release of Part 2 information that states the following:
NOTICE OF PROHIBITION ON REDISCLOSURE: This information has been disclosed to you from records protected by Federal confidentiality rules (42 CFR part 2). The Federal rules prohibit you from making any further disclosure of this information unless further disclosure is expressly permitted by the written consent of the person to whom it pertains or as otherwise permitted by 42 CFR part 2. A general authorization for the release of medical or other information is NOT sufficient for this purpose. The Federal rules restrict any use of the information to criminally investigate or prosecute any alcohol or drug abuse patient.
Emergencies and other limited exceptions: Part 2 permits limited disclosures without your consent in narrowly defined situations (for example, medical emergencies; scientific research, audit, or program evaluation; reports of crimes on program premises or against program personnel), subject to strict conditions.
Fundraising and marketing: We may contact you for fundraising purposes. You have the right to opt-out of fundraising communications by informing us in writing of your preference to opt-out. We will not use or disclose Part 2 records for fundraising or marketing purposes without your written consent. If we contact you for general fundraising, we will not use Part 2 information.
Our Responsibilities
- We are required by law to maintain the privacy and security of your protected health information.
- We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information.
- We must follow the duties and privacy practices described in this Notice and give you a copy of it.
- We will not use or share your information other than as described here unless you tell us we can in writing. If you tell us we can, you may change your mind at any time by letting us know in writing.
- We may change the terms of this Notice, and the changes will apply to all information we have about you. The new notice will be available upon request, in our offices, and on our website.
Who We Are and How to Contact Us
This Notice of Privacy Practices applies to Canopy Children’s Solutions and its health care and behavioral health care programs, including CARES Center, Inc., Mississippi Children’s Home Society and Mississippi Children’s Home Services.
Questions, requests, or complaints:
Canopy Children’s Solutions – Privacy Officer: Arin Clark Adkins, JD, LCSW, CHC
1465 Lakeland Drive, Jackson, MS 39216
Phone: 769.777.1000 | Email: arin.adkins@mycanopy.org | Web: mycanopy.org