← Back to home

Notice of Privacy Practices

Effective Date: January 1, 2025  |  Greater ATL Health — Lyna Ashu, FNP-C
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Who We Are

Greater ATL Health is a solo telehealth practice operated by Lyna Ashu, FNP-C, a board-certified Family Nurse Practitioner licensed in the State of Georgia. We are a "covered entity" under the Health Insurance Portability and Accountability Act of 1996 (HIPAA).

How We Use and Disclose Your Health Information

We use and share your protected health information (PHI) to provide care, run our practice, and as required or permitted by law:

• Treatment: We use your health information to provide, coordinate, and manage your care — including sharing relevant information with pharmacies, labs, and specialist providers you are referred to.
• Payment: We may use PHI to process payment for services, including collecting self-pay amounts and issuing receipts or superbills.
• Healthcare Operations: We may use your information for quality improvement, staff training, and practice administration — all subject to HIPAA safeguards.
• Required by Law: We will disclose PHI when required by federal, state, or local law — including reporting to public health authorities, law enforcement, or when ordered by a court.
• Emergencies: We may disclose PHI to avert a serious and imminent threat to your health or safety or the health or safety of others.
• Appointment Reminders: We may contact you by phone, email, or text to remind you of appointments or provide information about your care.

Uses and Disclosures Requiring Your Authorization

We will not use or disclose your PHI for purposes other than those described above without your written authorization, except as required by law. You may revoke your authorization in writing at any time, except to the extent we have already acted in reliance on it.

Specifically, we will only use or disclose your PHI for the following purposes with your explicit written authorization:

• Marketing communications
• Sale of your health information
• Psychotherapy notes (if applicable)
• Any other use or disclosure not described in this Notice

Your Rights Regarding Your Health Information

You have the following rights with respect to your PHI:

• Right to Access: You have the right to inspect and obtain a copy of your PHI maintained in a designated record set. We will provide access within 30 days of your request.
• Right to Amend: You may request that we amend PHI you believe is incorrect or incomplete. We may deny your request in certain circumstances.
• Right to an Accounting of Disclosures: You may request a list of disclosures we have made of your PHI outside of treatment, payment, and operations for the past six years.
• Right to Request Restrictions: You may request restrictions on how we use or disclose your PHI. We are not required to agree, but will comply with restrictions we do agree to.
• Right to Confidential Communications: You may request that we communicate with you about health matters in a specific way or location (e.g., by email only).
• Right to a Paper Copy: You may request a paper copy of this Notice at any time, even if you agreed to receive it electronically.
• Right to Breach Notification: If a breach of your unsecured PHI occurs, you have the right to be notified in accordance with federal law.

Our Duties

We are required by law to:

• Maintain the privacy of your PHI
• Provide you with this Notice of our legal duties and privacy practices
• Follow the terms of the Notice currently in effect
• Notify you if a breach of your unsecured PHI occurs

We reserve the right to change our privacy practices and this Notice at any time, provided such changes are permitted by applicable law. Changes will apply to all PHI we maintain. The current Notice is always available at greateratlhealth.com/hipaa.

Telehealth Privacy

All video visits are conducted through a HIPAA-compliant, fully encrypted telehealth platform. Your video, audio, and health data are never recorded or stored without your explicit consent. We use Business Associate Agreements (BAAs) with all technology vendors who handle PHI on our behalf.

How to Exercise Your Rights or File a Complaint

To exercise any of the rights described above or to submit a privacy-related request, contact us:

• Phone: (678) 570-7587
• Email: hello@greateratlhealth.com
• Mail: Greater ATL Health — Privacy Officer, Atlanta, GA

You also have the right to file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights if you believe your privacy rights have been violated. You will not be penalized for filing a complaint.

HHS Office for Civil Rights:
200 Independence Avenue, S.W., Washington, D.C. 20201
Phone: 1-800-368-1019  |  Website: hhs.gov/ocr/privacy

Effective Date & Changes

This Notice is effective January 1, 2025. Greater ATL Health reserves the right to change this Notice and to make the revised Notice effective for PHI we already have, as well as any new information received in the future.