ROCKY MOUNTAIN ASSOCIATED PHYSICIANS
NOTICE OF PRIVACY PRACTICES
Effective Date: 06/16/2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN ACCESS THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
OUR COMMITMENT TO YOUR PRIVACY
Rocky Mountain Associated Physicians, P.C. (“RMAP”) understands that your medical information is personal and confidential. We are committed to protecting your health information and complying with all applicable federal and state privacy laws, including the Health Insurance Portability and Accountability Act (“HIPAA”), the Health Information Technology for Economic and Clinical Health Act (“HITECH”), and applicable Utah law.
This Notice describes how we may use and disclose your Protected Health Information (“PHI”), your rights concerning your PHI, and our legal responsibilities regarding your health information.
OUR LEGAL DUTIES
We are required by law to:
- Maintain the privacy and security of your protected health information
- Provide you with this Notice of Privacy Practices
- Abide by the terms of this Notice currently in effect
- Notify affected individuals if a breach of unsecured protected health information occurs
- Comply with federal and state laws governing patient privacy and access to medical records
HOW WE MAY USE AND DISCLOSE YOUR HEALTH INFORMATION
Treatment
We may use and disclose your health information to provide, coordinate, and manage your healthcare, including:
- Evaluating and treating obesity and related medical conditions
- General and bariatric surgery evaluations, treatment and follow-up care
- Medical and surgical weight loss treatment and management
- Nutritional counseling and education
- Behavioral health and social work services
- Coordination with hospitals, surgical facilities, laboratories, pharmacies, and specialists
- Telehealth and remote patient monitoring services
Payment
We may use and disclose your information to obtain payment for healthcare services, including:
- Insurance verification
- Prior authorization requests
- Claims submission
- Utilization review
- Collection activities
Healthcare Operations
We may use and disclose information for healthcare operations, including:
- Quality assessment and improvement activities
- Staff training and education
- Accreditation and credentialing
- Compliance and risk management
- Business planning and administrative functions
Appointment Reminders and Patient Communications
We may contact you regarding:
- Appointments
- Surgery preparation
- Follow-up care
- Laboratory results
- Medication refills
- Patient education
- Support groups
- Health-related services offered by our practice
Communications may occur through:
- Telephone calls
- Voicemail messages
- Text messages (SMS)
- Patient portal messaging
Unless you notify us otherwise, messages may contain limited health information necessary to facilitate your care.
Individuals Involved in Your Care
Unless you object, we may share relevant information with family members, caregivers, or others involved in your care or payment for your care.
Business Associates
We may share your information with third-party service providers who assist us in providing healthcare services, billing, technology support, compliance activities, and business operations. These entities are required by law and contract to safeguard your health information.
HEALTH INFORMATION EXCHANGES
RMAP may participate in secure electronic health information exchanges and interoperability networks that allow healthcare providers involved in your care to access relevant medical information for treatment, payment, and healthcare operations as permitted by law.
OTHER USES AND DISCLOSURES PERMITTED OR REQUIRED BY LAW
We may disclose your health information without your authorization when permitted or required by law, including:
- Public health reporting
- Reporting abuse, neglect, or domestic violence
- Health oversight activities
- Judicial and administrative proceedings
- Law enforcement purposes
- Workers’ compensation claims
- Organ and tissue donation
- Coroner and medical examiner activities
- Research activities approved by appropriate review boards
- Preventing or reducing a serious threat to health or safety
- Military and national security activities
- Other situations required by federal or state law
USES AND DISCLOSURES REQUIRING YOUR WRITTEN AUTHORIZATION
Except as otherwise permitted by law, we will obtain your written authorization before:
- Using or disclosing psychotherapy notes
- Selling your health information
- Using your information for certain marketing purposes
- Any disclosure not otherwise permitted by law
You may revoke an authorization at any time in writing, except to the extent action has already been taken based upon the authorization.
YOUR RIGHTS REGARDING YOUR HEALTH INFORMATION
You have the right to:
Access Your Records
Inspect and obtain copies of your medical and billing records, including electronic copies when available.
Request Electronic Transmission
Request that we send an electronic copy of your records to another healthcare provider or designated individual when permitted by law.
Request Amendments
Request correction of information you believe is inaccurate or incomplete.
Request Restrictions
Request restrictions on certain uses or disclosures of your information. If you pay for a service in full out-of-pocket, you may request that we not disclose information regarding that service to your health plan. We will honor such requests unless disclosure is required by law.
Request Confidential Communications
Request that we communicate with you using alternative methods or locations.
Receive an Accounting of Disclosures
Request a list of certain disclosures of your health information made by us.
Obtain a Copy of This Notice
Receive a paper or electronic copy of this Notice at any time.
File a Complaint
File a complaint if you believe your privacy rights have been violated. You will not be retaliated against for filing a complaint.
ELECTRONIC COMMUNICATIONS AND TELEHEALTH
RMAP utilizes electronic communications and telehealth technologies to enhance patient care.
Although reasonable safeguards are used to protect your information, electronic communications may involve certain privacy and security risks.
By providing your contact information, you authorize RMAP to communicate with you regarding your healthcare through:
- Patient portals
- Text messaging
- Telehealth platforms
- Remote monitoring technologies when applicable
- Bariatric Mobile app for education and support group
You may withdraw consent for non-required communications by notifying us in writing.
INFORMATION SHARING AND INTEROPERABILITY
Federal law promotes the secure exchange of electronic health information among healthcare providers and healthcare organizations to improve patient care.
RMAP may share electronic health information through health information exchanges, interoperability networks, and other secure technologies as permitted by law for treatment, payment, healthcare operations, and other authorized purposes.
REPRODUCTIVE HEALTH INFORMATION
Federal law provides special protections for certain reproductive health information.
When applicable, RMAP will comply with federal and state requirements governing the use and disclosure of reproductive health information and may require additional documentation before certain disclosures are made.
FUNDRAISING COMMUNICATIONS
RMAP does not sell patient information. If we engage in fundraising activities permitted by law, you will have the opportunity to opt out of receiving future fundraising communications.
BREACH NOTIFICATION
In the event of a breach involving unsecured protected health information, we will provide notifications as required by federal and state law.
CHANGES TO THIS NOTICE
We reserve the right to revise this Notice at any time. Revised notices will apply to all protected health information maintained by the practice and will be available in our office and on our website.
CONTACT INFORMATION
Privacy Officer
Alicia Allen
Rocky Mountain Associated Physicians
1521 E 3900 S Ste 100
Salt Lake City, UT 84124
Phone: (801) 268-3800
If you believe your privacy rights have been violated, you may contact our Privacy Officer or file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights. Filing a complaint will not affect your care or result in retaliation.
