Types of care
Other services
Effective Date: February 13, 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
This Notice of Privacy Practices (“Notice”) applies to each of SUD Specialty Group – CA, Mental Health Specialty Group, P.A., Mental Health Specialty Group NJ, PC, and Mental Health Specialty Group KS, P.A., each doing business as Rula Health (collectively, “Rula”). These Rula entities each contract with Path, CCM, Inc. for management and administrative support services.
RULA’S COMMITMENT TO PRIVACY
Rula is committed to protecting the privacy of your protected health information (“PHI”). PHI refers to individually identifiable health information, regardless of form (e.g., paper, electronic, or verbal), that Rula creates or receives that relates to your physical or mental health, your health care, or payment for your health care.
The privacy protections described in this Notice reflect the requirements of federal regulations issued under the Health Insurance Portability and Accountability Act of 1996, as amended (“HIPAA”). The HIPAA regulations require Rula to:
Maintain the privacy of your PHI in compliance with HIPAA privacy standards and other applicable laws;
Give you this Notice outlining its legal duties and privacy practices with respect to your PHI;
Follow the terms of the Notice that are currently in effect; and
Notify affected individuals following a breach of unsecured PHI.
YOUR RIGHTS
This section describes your rights regarding the PHI we maintain about you. All requests or communications to us to exercise your rights discussed below must be submitted in writing to Privacy Officer, 5201 Great America Pkwy Suite 320 PMB 234, Santa Clara, CA 95054-1140 or by email to privacy@rula.com.
You have the right to all of the following:
Get an electronic or paper copy of your medical record: You can ask to see or get an electronic or paper copy of your medical record and other PHI we have about you. We will provide you with access to or a copy of your PHI, usually within 30 days of your request. We may charge a reasonable, cost-based fee as authorized by law.
Ask us to correct your medical record: You can ask us to correct PHI about you that you think is incorrect or incomplete. We may say “no” to your request, but we’ll tell you why in writing within 60 days.
Request confidential communications: You can ask us to contact you in a specific way (for example, home or office phone) or to send mail to a different address. We will say “yes” to all reasonable requests. We will not ask you the reason for your request.
Ask us to limit what we use or share: You can ask us not to use or share certain PHI for treatment, payment, or our operations. We are not required to agree to your request, unless the request is regarding disclosure of PHI to your health insurer and (i) you pay for a service or health care item out-of-pocket in full, and (ii) the disclosure is for the purpose of payment or our operations with your health insurer and is not otherwise required by law. Your request should state the information you want to limit; whether you want to limit Rula’s use, disclosure or both; and to whom you want the limits to apply, for example, disclosures to your spouse. If Rula agrees to your request, it will comply with the requested restriction, unless the information is needed to provide you emergency treatment.
Get a list of those with whom we’ve shared information: You have the right to request an "accounting of disclosures," which is a list of the times we have shared your PHI with outside parties, with the exception of certain disclosures, including those relating to treatment, payment, and health care operations, as well as disclosures made to you or consistent with your authorization. We’ll provide one accounting a year for free but will charge a reasonable, cost-based fee if you ask for another one within 12 months. Your request must state a time period, which may not be longer than six (6) years prior to the date on which the accounting is requested. You will be notified of any costs involved and you may choose to withdraw or modify your request at that time before any costs are incurred.
Be notified of a data breach: You have the right to be notified of the discovery of a breach of unsecured PHI.
Get a copy of this Notice: You can ask for a paper copy of this Notice at any time, even if you have agreed to receive the Notice electronically. We will provide you with a paper copy promptly. An electronic copy is always available at www.rula.com.
File a complaint if you feel your privacy rights have been violated: You can complain if you feel we have violated your privacy rights by contacting Rula, Attn: Privacy Officer, 5201 Great America Pkwy Suite 320 PMB 234, Santa Clara, CA 95054-1140or by contacting our Privacy Officer by telephone at 323-205-7088 or by email at privacy@rula.com.
You can also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights.
We will not retaliate against you for filing a complaint.
USES AND DISCLOSURES OF YOUR PHI
This section describes the different ways in which we can use and disclose your PHI without your authorization. Although not every possible use and disclosure will be listed in this Notice, all the ways that we are permitted to use and disclose your PHI without your authorization will fall within one of the following categories.
Please note that the use and disclosure of certain sensitive PHI (e.g., substance use disorder information, mental health information, HIV/AIDS information, venereal disease information) may be further restricted under other applicable federal or state law.
We typically use or share your PHI in the following ways:
Treat you: We can use your PHI and share it with other professionals who are treating you. Examples: We may contact you to remind you of your scheduled appointments or a missed appointment. Or a provider treating you for anxiety asks a primary care doctor about your overall health condition.
Bill for your services: We can use and share your PHI to bill and get payment from health plans or other entities. Example: We give PHI about you to your health insurance plan so it will pay for your services.
Run our organization: We use and disclose your PHI to operate our practice, validate care quality, and support administrative, financial, and legal functions.
We may share your PHI with third-party business associates who perform services for us under written agreements that require them to protect your information. Examples: using PHI to manage and coordinate your treatment and services, reviewing PHI to improve care quality or practice operations, or contacting you for scheduling, follow-up, or satisfaction surveys.
We may also use technology-assisted tools, including artificial intelligence (AI), to support certain administrative, operational, and supportive functions related to care delivery. These tools do not replace clinical judgment, and licensed health care providers remain responsible for all treatment decisions. Use of such tools is subject to applicable safeguards and contractual requirements, and your PHI is protected in accordance with applicable law.
USES AND DISCLOSURES WITHOUT YOUR PERMISSION
We are allowed or required to share your PHI in other ways including:
Public health and safety issues: We can share PHI about you for certain situations such as: preventing disease, helping with product recalls, reporting adverse reactions to medications, reporting suspected abuse, neglect, or domestic violence.
Do research: We can use or share your information for health research under certain circumstances.
Comply with the law: We will share your PHI as required by federal, state, or local law or regulation.
Respond to organ and tissue donation requests: We can share PHI about you with organ procurement organizations.
Work with a medical examiner or funeral director: We can share PHI with a coroner, medical examiner, or funeral director when an individual dies.
Workers’ compensation: We may share your PHI for workers’ compensation or similar programs that provide benefits for work-related injuries or illnesses.
Law enforcement and legal requirements: We may share your PHI with law enforcement officials or other government authorities when required or permitted by law, such as in response to a court order, warrant, subpoena, or summons; to report certain types of injuries as required by law; or for other law enforcement purposes permitted by law.
Health oversight activities: We may share your PHI with health oversight agencies for activities authorized by law, including audits, investigations, inspections, and licensure or disciplinary actions.
Special government functions, military, and correctional institutions: We may share your PHI for certain specialized government functions, such as military activities, national security, or presidential protective services, as permitted by law. If you are a member of the U.S. Armed Forces or of a foreign military, Rula may disclose your PHI as required by military command authorities or law. If you are an inmate in a correctional institution or under the custody of a law enforcement official, Rula may disclose your PHI to those parties as necessary for: the provision of your health care, maintaining the health or safety of yourself or other inmates, or ensuring the safety and security of the correctional institution or its agents.
Respond to lawsuits and legal actions: We may share PHI about you in response to a court or administrative order, or in response to a subpoena. Please see the “Special Protections for Sensitive Information” section of this Notice for additional information regarding restrictions on the disclosure of substance use disorder records subject to 42 CFR Part 2 in legal proceedings.
To avert a serious threat to health or safety: If there is a serious threat to the health and safety of you or another person, we may use and disclose your PHI to someone able to help lessen the threat.
Family and friends: If you verbally agree to the use or disclosure and in certain other situations, we may disclose limited PHI to your family or friends involved in your care or who helps pay for your care. We may also use or disclose your PHI to disaster-relief organizations so that your family or other persons responsible for your care can be notified about your condition, status, and location.
USES OF PHI THAT REQUIRE YOUR AUTHORIZATION
We may not use or disclose your PHI for any purposes not listed above unless you give us your written authorization. For example, we do not use or disclose your psychotherapy notes, use or disclose your PHI for marketing purposes, or sell your PHI, except with your authorization or as otherwise permitted by law.
If you change your mind after authorizing a use or disclosure of your PHI, you may withdraw your permission by revoking the authorization. However, your decision to revoke the authorization will not affect or undo any use or disclosure of your PHI that occurred before you notified us of your decision, or any actions that we have taken based upon your authorization. To revoke an authorization, you must notify our Privacy Officer in writing at the contact information listed below.
If you were mandated to treatment through the criminal legal system (including drug court, probation, or parole) and you sign a consent authorizing disclosures to elements of the criminal legal system such as the court, probation officers, parole officers, prosecutors, or other law enforcement, your right to revoke consent may be more limited and should be clearly explained on the consent you sign.
Please be aware that state and other federal laws may have additional requirements that we must follow or may be more restrictive than HIPAA on how we use and disclose certain of your PHI. If there are specific more restrictive requirements, even for some of the purposes listed above in this Notice, we may not disclose your PHI without your written permission as required by such laws.
REDISCLOSURES OF PHI MAY NO LONGER BE PROTECTED BY HIPAA
PHI disclosed by Rula in accordance with this Notice may be subject to redisclosure and may no longer be protected under HIPAA.
SPECIAL PROTECTIONS FOR SENSITIVE INFORMATION
Substance Use Disorder Records: To the extent Rula receives substance use disorder treatment records from programs subject to 42 CFR Part 2, or testimony relaying the content of such records, Rula shall not use or disclose such records in civil, criminal, administrative, or legislative proceedings against the individual who is the subject of the records, unless the use or disclosure is based on written consent, or a court order after notice and an opportunity to be heard is provided to the individual or the holder of the record, as provided in 42 CFR Part 2. A court order authorizing use or disclosure must be accompanied by a subpoena or other legal requirement compelling disclosure before the requested record is used or disclosed.
CHANGES TO THE TERMS OF THIS NOTICE
We can change the terms of this Notice, and the changes will apply to all information we currently have about you as well as any information we receive in the future. The new notice will be available upon request and on our website. The Notice will always contain an effective date.
CONTACT INFORMATION
If you have questions or concerns about your privacy rights, or the information contained in this Notice, please contact Rula’s Privacy Officer by mail at Rula, Attn: Privacy Officer, 5201 Great America Pkwy Suite 320 PMB 234 Santa Clara, CA 95054-1140, by telephone at 323-205-7088 or by email at privacy@rula.com.
© 2025 Rula Health. All rights reserved.
