Susan Payrovi, MD
HIPAA Notice of Privacy Practices
Effective Date: January 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN ACCESS THIS INFORMATION.
PLEASE REVIEW IT CAREFULLY.
Susan Payrovi, MD (“Practice”), operated by TRUE Medicine LLC, is committed to protecting the privacy and confidentiality of your protected health information (“PHI”).
This Notice describes how we may use and disclose your medical information, your rights regarding your information, and our legal duties under applicable privacy laws, including the Health Insurance Portability and Accountability Act (“HIPAA”).
1. Our Responsibilities
The Practice is required by law to:
- maintain the privacy of your protected health information,
- provide you with this Notice of Privacy Practices,
- follow the terms currently in effect,
- and notify you following certain breaches of unsecured protected health information when required by law.
We reserve the right to update this Notice at any time.
Updated versions may be posted on our Website and made available upon request.
2. How We May Use and Disclose Medical Information
We may use and disclose your protected health information for purposes including:
Treatment
We may use and disclose medical information to provide, coordinate, or manage your medical care.
Examples may include:
- reviewing symptoms,
- discussing treatment recommendations,
- coordinating care,
- reviewing laboratory information,
- and conducting shared medical visits.
Payment
We may use and disclose information for payment-related purposes, including:
- billing,
- insurance claims,
- payment processing,
- eligibility verification,
- and healthcare operations related to payment.
Healthcare Operations
We may use and disclose information for healthcare operations, including:
- quality improvement,
- staff training,
- compliance activities,
- operational management,
- and administrative functions.
3. Shared Medical Visits
The Practice may provide medical care through shared medical visits conducted in a group setting.
Participants in shared medical visits may hear limited personal health information disclosed by other participants.
Patients participating in shared medical visits are required to sign separate Shared Medical Visit Participation & Confidentiality Agreements.
Although the Practice takes reasonable steps to protect confidentiality, privacy limitations are inherent in group medical settings.
4. Telehealth Services
The Practice may provide services using telehealth technologies.
Telehealth services involve electronic communications and technology platforms that may create inherent privacy and security risks.
Patients participating in telehealth services are required to sign separate Telehealth Consent forms.
5. Additional Uses and Disclosures Permitted by Law
We may use or disclose protected health information without your written authorization when permitted or required by law, including:
- public health activities,
- reporting abuse or neglect,
- health oversight activities,
- legal proceedings,
- law enforcement requests,
- preventing serious threats to health or safety,
- workers’ compensation matters,
- and other legally authorized disclosures.
6. Uses and Disclosures Requiring Authorization
Certain uses and disclosures require your written authorization, including most:
- marketing communications,
- sale of protected health information,
- and uses beyond treatment, payment, or healthcare operations unless otherwise permitted by law.
You may revoke written authorization at any time in writing, except to the extent action has already been taken in reliance upon the authorization.
7. Your Rights Regarding Medical Information
You may have the right to:
Access Your Records
Request access to or copies of certain medical records.
Request Corrections
Request amendments to certain medical information you believe is incomplete or inaccurate.
Request Restrictions
Request limitations on certain uses or disclosures.
Request Confidential Communications
Request communications through alternative means or locations.
Receive an Accounting of Disclosures
Request certain information regarding disclosures made outside treatment, payment, and healthcare operations.
Receive a Paper Copy of This Notice
You may request a paper copy of this Notice at any time.
Certain legal limitations and exceptions may apply.
8. Electronic Communications
Electronic communications, including email and telehealth technologies, involve inherent privacy and security limitations.
Messages and communications are not monitored continuously.
Do not use email, Website forms, or electronic messaging systems for urgent or emergency medical concerns.
If you experience a medical emergency, call 911 or seek emergency medical care immediately.
9. Educational Community Programs
TRUE Medicine educational community programs are separate from clinical medical services.
Participation in educational community programs may not involve HIPAA-protected clinical care.
Information voluntarily shared in educational community environments may not receive the same protections as protected health information maintained within the clinical practice.
10. Data Security
The Practice uses reasonable administrative, technical, and operational safeguards designed to protect protected health information.
However, no system can guarantee absolute security.
11. Complaints
If you believe your privacy rights have been violated, you may file a complaint with the Practice or with the U.S. Department of Health and Human Services.
You will not be retaliated against for filing a complaint.
Complaints may be submitted using the contact information below.
12. Contact Information
Susan Payrovi, MD
Operated by TRUE Medicine LLC
PO Box 442
Burlingame, CA 94011
Website: drsusanpayrovi.com
