Notice of Privacy Practices
Lori WHNP, LLC
Last Updated: 2/11/2025
This Notice of Privacy Practices describes how your medical information may be used and disclosed and how you can access this information. Please review it carefully.
Your Privacy Rights
At Lori WHNP, LLC (“we,” “our,” or “us”), we are committed to protecting your health information in compliance with the Health Insurance Portability and Accountability Act (HIPAA), Illinois privacy laws, and telehealth regulations. This Notice describes how we may use and disclose your Protected Health Information (PHI) and your rights regarding your PHI.
1. Our Responsibilities
• We are required by law to maintain the privacy and security of your PHI in compliance with HIPAA and Illinois state laws.
• We will notify you promptly if a breach occurs that may have compromised the privacy or security of your information.
• We must follow the duties and privacy practices described in this Notice.
• We will not use or share your PHI except as described in this Notice unless you give us written permission.
2. How We May Use & Disclose Your PHI
We may use or share your PHI for the following purposes:
A. For Treatment (Including Telehealth)
• We may use your PHI to provide telehealth services or other medical care.
• This includes sharing information with other healthcare providers involved in your treatment.
• Your telehealth visits may include video, audio, and electronic communications, which will be conducted on a HIPAA-compliant platform.
B. For Payment
• We may use and share your PHI to bill and collect payment for services provided to you.
• This may include sharing information with health plans, HSA/FSA accounts, or third-party payment processors.
C. For Healthcare Operations
• We may use your PHI for administrative, quality assessment, and compliance purposes, including provider training and audits.
D. As Required by Law
• We may disclose your PHI if required by federal, state, or local law, such as reporting public health risks or complying with government investigations.
E. For Public Health & Safety
• We may share PHI in order to:
• Report communicable diseases to the Illinois Department of Public Health.
• Prevent or reduce serious health threats to you or the public.
• Comply with mandatory reporting laws, including child or elder abuse reporting.
F. For Legal & Law Enforcement Purposes
• We may disclose PHI in response to a court order, subpoena, or law enforcement request as permitted by law.
G. Illinois-Specific Privacy Laws
• Mental Health & Substance Use Records: Under the Illinois Mental Health and Developmental Disabilities Confidentiality Act, additional protections apply to mental health and substance use records. We will not disclose these records without your explicit written consent, except as permitted by law.
• HIV/AIDS & Genetic Testing: Under Illinois law, your HIV/AIDS status and genetic testing results require your written consent before disclosure, except as required by law.
3. When We Require Your Written Authorization
We will not use or share your PHI for the following without your written permission:
• Marketing purposes
• Sale of your PHI
• Most sharing of psychotherapy notes
You may revoke your authorization at any time, in writing, except to the extent we have already acted based on your permission.
4. Your Rights Regarding Your PHI
You have the following rights under HIPAA and Illinois law:
A. Right to Access Your Records
• You may request a copy of your medical records in electronic or paper format. Fees may apply for copying or mailing.
• If you receive telehealth services, you may request an electronic copy of your visit notes.
B. Right to Request Corrections
• If you believe your records contain incorrect or incomplete information, you may request a correction.
• We may deny your request if we believe the record is accurate or if the information was created by another provider.
C. Right to Request Confidential Communications
• You may ask us to contact you in a specific way (e.g., only by email or phone) for privacy reasons.
• We will accommodate reasonable requests when possible.
D. Right to Restrict Certain Disclosures
• You may request that we not share certain PHI with your insurance provider if you pay in full out-of-pocket for a service.
• Under Illinois law, we must honor this request unless required by law.
E. Right to an Accounting of Disclosures
• You may request a list of times we have shared your PHI (other than for treatment, payment, or healthcare operations) within the last six years.
F. Right to Receive a Copy of This Notice
• You may request a paper or electronic copy of this Notice at any time.
5. Special Considerations for Telehealth
• Your telehealth visits will take place on a secure, HIPAA-compliant platform.
• We will not record video or audio consultations without your written consent.
• If you are in Illinois, we comply with the Illinois Telehealth Act, which ensures that you receive the same privacy protections as in-person care.
• You may request a summary or copy of your telehealth records at any time.
6. How to Exercise Your Rights or File a Complaint
If you have questions or concerns about this Notice or believe your privacy rights have been violated, you may contact us at:
Lori WHNP, LLC
Phone: (630) 344-9756
Fax: (630) 348-7421
Mailing Address:
122 N Wheaton Ave, Unit 1072, Wheaton, IL 60187
You may also file a complaint with the Illinois Department of Public Health or the U.S. Department of Health & Human Services (HHS) at:
Office for Civil Rights
200 Independence Avenue, S.W.
Washington, D.C. 20201
Phone: 1-800-368-1019
Website: www.hhs.gov/ocr/privacy/hipaa/complaints/
We will not retaliate against you for filing a complaint.
7. Changes to This Notice
We reserve the right to update this Notice at any time. Any changes will apply to all PHI we maintain and will be posted on our website with an updated effective date.