Effective Date: 02/16/2026
THIS NOTICE EXPLAINS HOW YOUR HEALTH INFORMATION MAY BE USED AND SHARED, AND HOW YOU CAN ACCESS IT. PLEASE REVIEW IT CAREFULLY.
Our Commitment to Protecting Your Privacy
Momentum Behavior Services is dedicated to protecting your personal and health information. As part of delivering Applied Behavior Analysis (ABA) therapy and related services, we create and maintain records about your care.
We comply with the Health Insurance Portability and Accountability Act (HIPAA), as well as applicable state laws in Minnesota and California, which may provide additional protections for your information.
Protected Health Information (PHI) includes any information that identifies you and relates to your health, care, or payment for services.
This Notice explains:
- How we use and disclose your information
- Your rights
- Our legal responsibilities
We are required to follow this Notice.
Changes to This Notice
We may update this Notice at any time. Updates apply to all records we maintain. The most current version will always be available upon request and in our offices.
How We Use and Share Your Information
We may use and disclose your PHI without your written authorization for:
Treatment
To provide and coordinate care with therapists, physicians, and other providers.
Payment
To bill and collect payment from insurance providers or other payers.
Healthcare Operations
To run and improve our organization, including:
- Quality assurance and staff training
- Administrative functions
- Customer service and complaint resolution
We may also create de-identified data that cannot identify you.
Other Permitted Uses and Disclosures
We may disclose your information when permitted or required by law, including:
- Public health and safety reporting
- Government oversight, audits, and investigations
- Reporting abuse, neglect, or domestic violence
- Legal proceedings and law enforcement
- Preventing serious threats to safety
- Workers’ compensation and similar programs
- Correctional institutions
- Approved research
- Business associates who support our operations
Sharing with Family and Caregivers
Unless you object, we may share relevant information with individuals involved in your care. If you cannot make decisions, we may act in your best interest using professional judgment.
Uses Requiring Your Authorization
We will obtain your written permission for:
- Most uses of psychotherapy notes
- Marketing communications
- Sale of your health information
- Any other uses not described here
You may revoke your authorization at any time in writing.
Special Protections for Substance Use Disorder Records
Records related to substance use disorder treatment are protected under federal law (42 CFR Part 2) and require written consent for most disclosures.
Additional Privacy Protections Under State Law
California Privacy Rights (CMIA & CCPA/CPRA)
If you receive services in California, you have additional rights under California law:
- Your medical information is protected under the California Confidentiality of Medical Information Act (CMIA)
- We will not disclose your medical information without authorization except as permitted by law
You have the right to:
- Request access to your records
- Request corrections to inaccurate information
- Request limits on certain uses
Under the California Consumer Privacy Act (CCPA/CPRA) (where applicable):
- You have the right to know what personal information we collect and how it is used
- You may request deletion of certain personal information, subject to healthcare exceptions
- You have the right to request that your data is not sold; we do not sell PHI
- You have the right to non-discrimination for exercising your privacy rights
Minnesota Privacy Rights
If you receive services in Minnesota, your information is also protected under Minnesota health privacy laws, including:
- The Minnesota Health Records Act (Minn. Stat. §144.291–144.298)
- We generally must obtain your consent before releasing your health records, except as allowed by law
You have the right to:
- Access your health records within required timeframes
- Request copies of your records, with fees limited as allowed by law
- Request corrections to your records
- Receive clear information about how your records are shared
Minnesota law may be more restrictive than HIPAA in certain cases, and we will follow the stricter standard.
Redisclosure Notice
Information disclosed under this Notice may be redisclosed by the recipient and may no longer be protected under federal law, unless otherwise restricted.
Fundraising Communications
We may contact you for fundraising purposes. You may opt out at any time. We will not use sensitive records, such as substance use disorder information, without your written consent.
Your Rights
You have the right to:
- Access your records within 30 days, with possible extension
- Request restrictions on how your information is used
- Request confidential communications
- Request corrections to your records
- Receive an accounting of disclosures
- Receive a paper copy of this Notice
- Be notified of a data breach
- Opt out of fundraising communications
- File a complaint
Filing a Complaint
If you believe your privacy rights have been violated, you may contact:
Momentum Behavior Services
Privacy Officer
507-292-1006
support@mbsaba.com
You may also file a complaint with:
U.S. Department of Health and Human Services
https://ocrportal.hhs.gov/ocr/smartscreen/main.jsf
Or by mail:
200 Independence Avenue, S.W.
Washington, D.C. 20201
We will not retaliate against you for filing a complaint.