This notice describes how medical information about you may be used and disclosed and how you can obtain access to this information. Please review it carefully.
Introduction
We are required by law to maintain the privacy of “protected health information.” “Protected health information” includes any identifiable information that we obtain from you or others that relates to your physical or mental health, the health care you have received, or payment for your health care.
As required by law, this notice provides you with information about your rights and our legal duties and privacy practices with respect to the privacy of protected health information. This notice also discusses the uses and disclosures we will make of your protected health information. We must comply with the provisions of this notice, although we reserve the right to change the terms of this notice from time to time and to make the revised notice effective for all protected health information we maintain. You can always request a copy of our most current privacy notice from our office.
Permitted Uses and Disclosures
We can use or disclose your protected health information for purposes of treatment, payment and health care operations.
- Treatment means the provision, coordination or management of your health care, including consultations between health care providers regarding your care and referrals for health care from one health care provider to another. For example, a doctor treating you for a broken leg may need to know if you have diabetes because diabetes may slow the healing process. Therefore, the doctor may review your medical records to assess whether you have potentially complicating conditions like diabetes.
- Payment means activities we undertake to obtain reimbursement for the health care provided to you, including determinations of eligibility and coverage and other utilization review activities. For example, prior to providing health care services, we may need to provide to your insurance carrier (or other third party payor) information about your medical condition to determine whether the proposed course of treatment will be covered. When we subsequently bill the carrier or other third party payor for the services rendered to you, we can provide the carrier or other third party payor with information regarding your care if necessary to obtain payment.
- Health Care Operations mean the support functions of our practice related to treatment and payment, such as quality assurance activities, case management, receiving and responding to patient complaints, physician reviews, compliance programs, audits, business planning, development, management and administrative activities. For example, we may use your medical information to evaluate the performance of our staff in caring for you. We may also combine medical information about many patients to decide what services are not needed, and whether certain new treatments are effective.
Disclosures Related To Communications With You Or Your Family
We may contact you to provide appointment reminders or information about treatment alternatives or other health-related benefits and services that may be of interest to you or relate specifically to your medical care through our office. For example, we may leave appointment reminders on your answering machine or with a family member or other person who may answer the telephone at the number that you have given us in order to contact you.
We may disclose your protected health information to your family or friends or any other individual identified by you when they are involved in your care or the payment for your care. We will only disclose the protected health information directly relevant to their involvement in your care or payment. We may also use or disclose your protected health information to notify, or assist in the notification of, a family member, a personal representative, or another person responsible for your care of your location, general condition or death. If you are available, we will give you an opportunity to object to these disclosures, and we will not make these disclosures if you object. If you are not available, we will determine whether a disclosure to your family or friends is in your best interest, and we will disclose only the protected health information that is directly relevant to their involvement in your care.
We will allow your family and friends to act on your behalf to pick up prescriptions, medical supplies, X-rays, and similar forms of protected health information, when we determine, in our professional judgment, that it is in your best interest to make such disclosures.
Other Situations
Organ and Tissue Donation. If you are an organ donor, we may release medical information to organizations that handle organ procurement or organ, eye or tissue transplantation or to an organ donation bank, as necessary to facilitate organ or tissue donation and transplantation.
Military and Veterans. If you are a member of the Armed Forces, we may release medical information about you as required by military command authorities. We may also release medical information about foreign military personnel to the appropriate foreign military authority.
Public Health Risks. We may disclose medical information about you for public health activities. These activities generally include the following:
- To prevent or control disease, injury or disability
- To report births and deaths
- To report victim of abuse, neglect, or domestic violence
- To report reactions to medications
- To notify people of product, recalls, repairs or replacements
- To notify a person who may have been exposed to a disease or may be at risk for contracting or spreading a disease or condition
Health Oversight Activities. We may disclose medical information to federal or state agencies that oversee our activities. These activities are necessary for the government to monitor the health care system, government programs, and compliance with civil rights laws. We may disclose protected health information to persons under the Food and Drug Administration’s jurisdiction to track products or to conduct post-marketing surveillance.
Lawsuits and Disputes. If you are involved in a lawsuit or dispute, we may disclose medical information about you in response to a court or administrative order. We may also disclose medical information about you in a response to a subpoena, discovery request or other lawful process by someone else involved in the dispute.
Law Enforcement. We may release medical information if asked to do so by a law enforcement official:
- In response to a court order, subpoena, warrant, summons or similar process
- To identify or locate a suspect, fugitive, material witness, or missing person
- About the victim of a crime if, under certain limited circumstances, we are unable to obtain the person’s agreement
- About a death we believe may be the result of a criminal conduct
- About criminal conduct on our premises
- In emergency circumstances to report a crime; the location of the crime or victims or the identity, description or location of the person who committed the crime
Coroners, Medical Examiners and Funeral Directors. We may release medical information to a coroner or medical examiner. This may be necessary, for example, to identify a deceased person or determine the cause of death. We may also release medical information about patients to funeral directors as necessary to carry out their duties.
Inmates. If you are an inmate of a correctional institution or under the custody of a law enforcement official, we may release medical information about you to the correctional institution or law enforcement official. This release would be necessary for the institution to provide you with health care, to protect your health and safety or the health and safety of others, or for the safety and security of the correctional institution.
Serious Threats. As permitted by applicable law and standards of ethical conduct, we may use and disclose protected health information if we, in good faith, believe that the use of disclosure is necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public.
Disaster Relief. When permitted by law, we may coordinate our uses and disclosures of protected health information with public or private entities authorized by law or by charter to assist in disaster relief efforts.
Your Rights
1. You have the right to request restrictions on our uses and disclosures of protected health information for treatment, payment and health care operations. However, we are not required to agree to your request.
2. You have the right to reasonably request to receive communications of protected health information by alternative means or at alternative locations.
3. Subject to payment of a reasonable copying charge as provided by state law, you have the right to inspect or obtain a copy of the protected health information contained in your medical and billing records and in any other practice records used by us to make decisions about you, except for:
- Psychotherapy notes, which are notes recorded by a mental health professional documenting or analyzing the contents of conversation during a private counseling session or a group, joint or family counseling session and that have been separated from the rest of your medical record
- Information compiled in a reasonable anticipation of, or for use in, a civil, criminal, or administrative action or proceeding.
- Protected health information involving laboratory tests when your access is required by law
- If you are a prison inmate and obtaining such information would jeopardize your health, safety, security, custody, or rehabilitation or that of other inmates, or the safety of any officer, employee, or other person at the correctional institution or person responsible for transporting you
- If we obtained or created protected health information as part of a research study for as long as the research is in progress, provided that you agreed to the temporary denial of access when consenting to participate in the research
- Your protected health information is contained in records kept by a federal agency or contractor when your access is required by law
- If the protected health information was obtained from someone other than us under a promise of confidentiality and the access requested would be reasonably likely to reveal the source of the information
We may also deny a request for access to protected health information if:
- A licensed health care professional has determined, in the exercise of professional judgment, that the access requested is reasonably likely to endanger your life or physical safety or that of another person
- The protected health information makes reference to another person (unless such other person is a health care provider) and a licensed health care professional has determined, in the exercise of professional judgment, that the access requested is reasonably likely to cause substantial harm to such other person
- The request for access is made by the individual’s personal representative and a licensed health care professional has determined, in the exercise of professional judgment, that the provision of access to such personal representative is reasonably likely to cause substantial harm to you or another person
If we deny a request for access for any of the three reasons described above, then you have the right to have our denial reviewed in accordance with the requirements of applicable law.
4. You have the right to request a correction to your protected health information, but we may deny your request for correction, if we determine that the protected health information or record that is the subject of the request:
- Was not created by us, unless you provide a reasonable basis to believe that the originator of protected health information is no longer available to act on the requested amendment
- Is not part of your medical or billing records
- Is not available for inspection as set forth above
- Is not accurate and complete
In any event, any agreed upon correction will be included as an addition to, and not a replacement of, already existing records.
5. You have the right to receive an accounting of disclosures of protected health information made by us to individuals or entities other than to you for the period provided by law, except for disclosures:
- To carry out treatment, payment and health care operations as provided above
- To persons involved in your care or for other notification purposes as provided by law
- For national security or intelligence purposes as provided by law
- To correctional institutions or law enforcement officials as provided by law
- That occurred prior to April 14, 2003
- That are otherwise not required by law to be included in the accounting
6. You have the right to request and receive a paper copy of this notice from us.
7. The above rights may be exercised only by written communication to us. Any revocation or other modification of consent must be in writing delivered to us.
Complaints
If you believe that your privacy rights have been violated, you should immediately contact our Practice or our Privacy Officer. All complaints must be submitted in writing. We will not take action against you for filing a complaint. You also may file a complaint with the Secretary of Health and Human Services.
HIPAA NOTICE • REQUIRED FEDERAL DISCLOSURE
Notice of Privacy Practices
This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.
Practice: Moss Wall Orthodontics
Effective: February 16, 2026
Regulation: 45 CFR §164.520 | HIPAA Privacy Rule
Published by: HHS OCR Model Notice — Revised February 13, 2026
This notice is required by the HIPAA Privacy Rule. Signing an acknowledgment of receipt does not limit your rights. Questions? Contact us or visit hhs.gov/hipaa
- Get a copy of your record
- Correct your record
- Request confidential comms
- Ask us to limit what we share
- List of those we’ve shared with
- Get a copy of this notice
- Choose someone to act for you
- File a complaint
- Share with family/friends
- Share in disaster relief
- Marketing (requires permission)
- Sale of info (requires permission)
- Psychotherapy notes (permission)
- Opt out of fundraising
- Treat and care for you
- Run our practice
- Bill for your services
- Public health & safety
- Research
- Comply with the law
- Legal actions & subpoenas
Section 1 — Your Rights
When it comes to your health information, you have certain rights. This section explains your rights and some of our responsibilities to help you.
Get an electronic or paper copy of your medical record
You can ask to see or get an electronic or paper copy of your medical record and other health information we have about you. Ask us how to do this.
We will provide a copy or a summary of your health information, usually within 30 days of your request. We may charge a reasonable, cost-based fee.
Ask us to correct your medical record
You can ask us to correct health information about you that you think is incorrect or incomplete. Ask us how to do this.
We may say “no” to your request, but we’ll tell you why in writing within 60 days.
Request confidential communications
You can ask us to contact you in a specific way (for example, home, office, or cell phone) or to send mail to a different address.
We will say “yes” to all reasonable requests.
Ask us to limit what we use or share
You can ask us not to use or share certain health information for treatment, payment, or our operations. We are not required to agree to your request, and we may say “no” — for example, if it could affect your care. If we agree, we may still share information in the event that you need emergency treatment.
If you pay for a service or health care item out-of-pocket in full, you can ask us not to share that information for the purpose of payment or our operations with your health insurer. We will say “yes” unless a law requires us to share that information.
Get a list of those with whom we’ve shared information
You can ask for a list (accounting) of the times we’ve shared your health information for six years prior to the date you ask, who we shared it with, and why.
We will include all the disclosures except for those about treatment, payment, and health care operations, and certain other disclosures (such as any you asked us to make). We’ll provide one accounting a year for free but will charge a reasonable, cost-based fee if you ask for another one within 12 months.
Get a copy of this privacy notice
You can ask for a paper copy of this notice at any time, even if you have agreed to receive the notice electronically. We will provide you with a paper copy promptly.
Choose someone to act for you
If someone has authority to act as your personal representative, such as if someone has your medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your health information.
We will make sure the person has this authority and can act for you before we take any action.
Note for parents of orthodontic patients: When a parent or legal guardian accompanies a minor patient, we will provide this notice to the parent or guardian and make a good-faith effort to obtain written acknowledgment of receipt, as required by 45 CFR §164.520(c)(2)(ii).
Section 2 — Your Choices
For certain health information, you can tell us your choices about what we share. If you have a clear preference for how we share your information in the situations described below, talk to us. Tell us what you want us to do, and we will follow your instructions.
You have both the right and choice to tell us to:
- Share information with your family, close friends, or others involved in your care or payment for your care
- Share information in a disaster relief situation
If you are not able to tell us your preference — for example, if you are unconscious — we may go ahead and share your information if we believe it is in your best interest. We may also share your information when needed to lessen a serious and imminent threat to health or safety.
We never share your information unless you give us written permission for:
Marketing purposes • Sale of your information • Most sharing of psychotherapy notes
Fundraising
We may contact you for fundraising efforts, but you can tell us not to contact you again. If we have your substance use disorder patient records (subject to 42 CFR Part 2), we will give you clear and conspicuous notice in advance and a meaningful choice about whether to receive fundraising communications that use your Part 2 information.
Section 3 — Our Uses & Disclosures
How we typically use or share your health information
Treat You
We can use your health information and share it with other professionals who are treating you.
Example: Your orthodontist coordinates with your general dentist or an oral surgeon to plan your treatment.
Run Our Organization
We can use and share your health information to run our practice, improve your care, and contact you when necessary.
Example: We use health information about you to manage your treatment and services, conduct quality reviews, and train our staff.
Bill for Your Services
We can use and share your health information to bill and get payment from health plans or other entities.
Example: We give information about you to your health insurance plan so it will pay for your orthodontic services.
How else we may use or share your health information
We are allowed or required to share your information in other ways — usually in ways that contribute to the public good, such as public health and research. We have to meet many conditions in the law before we can share your information for these purposes.
Important — Substance Use Disorder Records (42 CFR Part 2): In all cases below, if we have substance use disorder patient records about you subject to 42 CFR Part 2, we cannot use or share information in those records in civil, criminal, administrative, or legislative investigations or proceedings against you without (1) your written consent or (2) a court order and a subpoena.
Help with Public Health and Safety Issues
We can share health information for certain situations such as: preventing disease, helping with product recalls, reporting adverse reactions to medications, reporting suspected abuse, neglect, or domestic violence, and preventing or reducing a serious threat to anyone’s health or safety.
Do Research
We can use or share your information for health research, subject to applicable legal requirements and protections.
Comply with the Law
We will share information about you if state or federal laws require it, including with the Department of Health and Human Services if it wants to see that we’re complying with federal privacy law.
Respond to Organ and Tissue Donation Requests
We can share health information about you with organ procurement organizations.
Work with a Medical Examiner or Funeral Director
We can share health information with a coroner, medical examiner, or funeral director when an individual dies.
Address Workers’ Compensation, Law Enforcement & Other Government Requests
We can use or share health information about you for workers’ compensation claims; for law enforcement purposes; with health oversight agencies; and for special government functions such as military, national security, and presidential protective services.
Respond to Lawsuits and Legal Actions
We can share health information about you in response to a court or administrative order, or in response to a subpoena.
Redisclosure Notice (required under 45 CFR §164.520): Please be aware that PHI disclosed by our practice may be redisclosed by the recipient and may no longer be protected under the HIPAA Privacy Rule, unless stronger federal confidentiality protections (such as 42 CFR Part 2 for SUD records) apply.
Section 4 — Our Responsibilities
We are required by law to maintain the privacy and security of your protected health information.
We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information.
We must follow the duties and privacy practices described in this notice and give you a copy of it.
We will not use or share your information other than as described in this notice unless you tell us we can in writing. If you tell us we can, you may change your mind at any time. Let us know in writing if you change your mind.
For more information, visit: www.hhs.gov/hipaa/for-individuals/notice-privacy-practices
Section 5 — Changes to the Terms of This Notice
We can change the terms of this notice, and the changes will apply to all information we have about you. The new notice will be available upon request, in our office, and on our website. Any material changes will be posted with an updated effective date, consistent with 45 CFR §164.520(b)(1)(v)(C).
Section 6 — File a Complaint If You Feel Your Rights Are Violated
You can complain if you feel we have violated your rights by contacting us using the information in the Contact section below.
You can also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights:
- By mail: 200 Independence Avenue, S.W., Washington, D.C. 20201
- By phone: 1-877-696-6775
- Online: www.hhs.gov/hipaa/filing-a-complaint
Section 7 — Contact & Privacy Officer
Privacy Officer
Dr. Moss
Phone
(360) 491-7080
drmdwall@gmail.com
Mailing Address
5320 Corporate Center Loop SE, Lacey, WA 98503, US
Office Hours
- Monday: 8:00 AM - 5:00 PM
- Tuesday: 8:00 AM - 5:00 PM
- Wednesday: 8:00 AM - 5:00 PM
- Thursday: 8:00 AM - 5:00 PM
- Friday: 9:00 AM - 12:00 PM
Fax
N/A
U.S. Department of Health & Human Services — Office for Civil Rights:
200 Independence Avenue, S.W., Washington, D.C. 20201 | 1-877-696-6775 | www.hhs.gov/hipaa/filing-a-complaint
If you participate in a patient portal for accessing your records online, you may contact us through the portal’s secure messaging system in addition to the methods listed above.
This notice was prepared in accordance with the HIPAA Privacy Rule (45 CFR §164.520) and 42 CFR Part 2. Content based on the HHS OCR Model Notice for Health Care Providers, last reviewed February 13, 2026.
Effective Date: February 16, 2026
MOSS WALL ORTHODONTICS
- Address: 5320 Corporate Center Loop SE, Lacey, WA 98503, United States
- Phone: (360) 491-7080