Privacy Notice Overview
Vero Beach Recovery Center respects the privacy of patients, family contacts, workforce members, and website users. This page explains how information may be collected, used, and protected when you access our patient or staff portal, communicate with our organization, or receive treatment services.
If you receive substance use disorder treatment services from us, some of your records may be protected not only by HIPAA and applicable state law, but also by the federal confidentiality requirements in 42 CFR Part 2. Those records have heightened protections and may not be used, disclosed, or redisclosed except as permitted by law.
Protected Health Information
We may create, receive, maintain, or transmit protected health information in connection with admissions, clinical services, treatment planning, utilization review, payment activities, quality activities, and healthcare operations. We apply administrative, technical, and physical safeguards designed to protect that information from unauthorized access, use, or disclosure.
Portal access is intended only for authorized users with valid credentials.
Users must protect passwords, multifactor authentication methods, and recovery options.
Information shown in the portal should not be accessed from shared or unsecured devices unless appropriate safeguards are in place.
Special Confidentiality for SUD Records
Certain records that identify a person as having or having had a substance use disorder are protected under federal law, including 42 U.S.C. 290dd-2 and 42 CFR Part 2. These laws apply to covered records maintained by federally assisted substance use disorder programs and create protections beyond standard HIPAA privacy rules.
When Part 2 applies, we may use and disclose covered records only as authorized by applicable law, including for treatment, payment, and healthcare operations where permitted, or where another specific legal exception applies. We also provide notice that Part 2 records generally may not be used in civil, criminal, administrative, or legislative proceedings against a patient unless the patient gives written consent or a court order meeting Part 2 standards authorizes that use.
Redisclosure Limits
Any person or entity that receives Part 2-protected information from our program may be restricted from further disclosure of that information unless the patient provides written consent or the disclosure is otherwise expressly permitted by 42 CFR Part 2. Users should not copy, forward, screenshot, download, or share portal content containing substance use disorder treatment information unless they are authorized to do so.
Cookies and Portal Data
We and our technology providers may use cookies, session tools, and similar technical functions to support sign-in, security, fraud prevention, page routing, and platform reliability. We do not use cookie features to override or reduce any privacy rights that apply to protected health information or Part 2-protected records.
Technical data such as browser type, device type, timestamps, IP address, and authentication events may be logged to help secure the portal, detect suspicious activity, and maintain service performance. Where health information is involved, such data is handled consistently with applicable privacy and security requirements.
Questions, Rights, and Contact Information
Questions about this notice, our privacy practices, or your rights should be directed to our Privacy Officer or designated compliance contact. Insert your organization’s mailing address, phone number, email address, and any state-specific complaint rights on the final published version.
This page is intended as a concise portal-facing summary and should be aligned with your full HIPAA Notice of Privacy Practices, your Part 2 notice language, your website privacy disclosures, and your internal policies.
