HIPAA
Notice of Privacy Practices
Last updated: August 2, 2026
This notice describes how medical information about you may be used and disclosed, and how you can get access to this information. Please review it carefully. Sanevi Health Solutions is required by the HIPAA Privacy Rule (45 CFR Parts 160 and 164) and by Illinois law to maintain the privacy of your protected health information (PHI), to give you this notice of our legal duties and privacy practices, and to follow the terms of the notice currently in effect.
1. Who follows this notice
This notice applies to Sanevi Health Solutions, its owners, employed and contracted clinicians (including psychiatric mental health nurse practitioners), administrative staff, students, and business associates who create or receive PHI on our behalf. Our business associates are bound by written business associate agreements that require them to protect your information to the same standard we do.
2. How we may use and disclose your health information without your written authorization
- Treatment. To provide, coordinate, or manage your care — for example, sharing information with your primary care provider, therapist, or pharmacy when permitted by law and, where Illinois law requires it, with your written consent.
- Payment. To bill and obtain payment from you, your health plan, or another payer, including eligibility checks, prior authorization, and utilization review.
- Health care operations. Quality assessment, clinician review, training, credentialing, compliance, audits, and business management.
- Appointment and care reminders. Calls, texts, letters, or emails about appointments, refills, and treatment alternatives. You may ask us to contact you by a specific method or at a specific location.
- As required by law. Including reports of suspected abuse or neglect of a child (325 ILCS 5) or of an eligible adult (320 ILCS 20), certain communicable disease reporting, judicial and administrative proceedings, and law enforcement requests that meet legal requirements.
- To prevent a serious threat. When disclosure is necessary to prevent or lessen a serious and imminent threat to the health or safety of you or another person, consistent with our duty to warn and protect under Illinois law (740 ILCS 110/11 and the Mental Health and Developmental Disabilities Confidentiality Act).
- Health oversight, public health, workers' compensation, coroners, organ donation, and research when the specific conditions in the HIPAA Privacy Rule are met.
3. Illinois mental health confidentiality — stronger than HIPAA
Most of the records we create are mental health records protected by the Illinois Mental Health and Developmental Disabilities Confidentiality Act (740 ILCS 110). Illinois law is generally stricter than HIPAA, and where it is stricter, we follow Illinois law. In practice this means:
- We generally obtain your written consent on a form that meets 740 ILCS 110/5 before disclosing your mental health records or communications — including to other treating providers, family members, schools, employers, or attorneys.
- Each disclosure we make with your consent includes a written statement prohibiting redisclosure without your further consent.
- Psychotherapy notes kept separate from your medical record are not disclosed without your specific written authorization, except in the narrow circumstances permitted by law.
- If any part of your record is covered by federal substance use disorder confidentiality rules (42 CFR Part 2), those additional protections apply.
4. Patients ages 13 to 17 and parent/guardian access
We treat patients beginning at age 13. Illinois law gives adolescents specific rights that affect what a parent or guardian can see and decide:
- Under 740 ILCS 110/4, a parent or guardian of a minor generally has the right to inspect and copy the minor's mental health record, except that the therapist may withhold specific information if disclosure would be seriously harmful to the minor's treatment relationship or to the minor's physical, mental, or emotional health. A minor age 12 or older must be informed of, and may object to, a parent's request for access, and the reasons for any denial are documented.
- Under 405 ILCS 5/3-550 of the Illinois Mental Health and Developmental Disabilities Code, a minor age 12 or older may request and receive a limited course of outpatient counseling or psychotherapy without parental consent, subject to the statute's session limits and notification rules.
- For evaluation, medication management, and ongoing treatment of patients under 18, we require consent and active participation from a parent or legal guardian, and we confirm guardianship before the first visit.
- We discuss confidentiality expectations openly with teens and guardians at the first visit, including the limits created by safety concerns.
5. Uses that always require your written authorization
- Most uses and disclosures of psychotherapy notes.
- Uses and disclosures for marketing purposes.
- Disclosures that constitute a sale of protected health information.
- Any other use or disclosure not described in this notice.
- You may revoke an authorization in writing at any time, except to the extent we have already acted in reliance on it.
6. Your rights
- Access and copies. You may inspect and obtain a copy of your record, including an electronic copy, generally within 30 days. We may charge a reasonable, cost-based fee.
- Amendment. You may ask us to correct information you believe is inaccurate or incomplete.
- Accounting of disclosures. You may request a list of certain disclosures we made in the six years before your request.
- Restrictions. You may ask us to limit how we use or disclose your information. We must agree to a request to withhold information from your health plan when you pay for that service in full out of pocket.
- Confidential communications. You may ask us to contact you a certain way or at a certain address.
- Paper copy. You may request a paper copy of this notice at any time, even if you agreed to receive it electronically.
- Breach notification. You will be notified if a breach occurs that compromises the privacy or security of your information, as required by 45 CFR Part 164 Subpart D and the Illinois Personal Information Protection Act (815 ILCS 530).
- Choose someone to act for you. A personal representative with legal authority may exercise these rights on your behalf.
7. How to exercise your rights or file a complaint
Submit requests in writing to our Privacy Officer at docs@sanevihs.com or 1515 N Harlem Ave, Suite 101, Oak Park, IL 60302. We will respond within the timeframes required by law.
If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services, Office for Civil Rights, 200 Independence Avenue SW, Washington, DC 20201, 1-800-368-1019 (TDD 1-800-537-7697), or at hhs.gov/ocr/complaints. You may also contact the Illinois Attorney General's Health Care Bureau. We will never retaliate against you for filing a complaint.
8. Changes to this notice
We may change this notice and make the new terms effective for all information we maintain. The current version is always posted on this page with its effective date and is available at our office on request.
Questions about this notice? Contact our Privacy Officer at docs@sanevihs.com or (708) 948-7039, or write to Sanevi Health Solutions, 1515 N Harlem Ave, Suite 101, Oak Park, IL 60302.
