Notice of Privacy Practices

At Thrive Behavioral Health, we take our clients' privacy seriously.

This Notice of Privacy Practices (NPP) describes how Thrive Behavioral Health, Inc. may use and disclose your protected health information to carry out treatment, payment or health care operations.  It also describes your rights to access and control the disclosure of your protected health information.  “Protected health information” (PHI) is information about you, including demographic information, that may identify you and that relates to your past, present or future physical or mental health condition and related health care services.

We understand that information about you and your health is a very personal and therefore, we will make every effort to protect your privacy as required by law.  We will only use and disclose your PHI as allowed by applicable law.

We are required to abide by the terms of this Notice of Privacy Practices and provide you with notice of our legal duties and privacy practices with respect to your PHI. A copy of our notice is being provided to you and is available upon request by accessing our website, calling the office and requesting a copy, or asking for one at the time of your next appointment. We may change our notice at any time. This new notice will be effective for all PHI that we maintain at that time.

Thrive Behavioral Health uses/disclosures of PHI- for treatment, payment & operations and progress in treatment:

Each time you visit Thrive Behavioral Health, a record of your visit is made. Typically, this record contains your history, symptoms, diagnoses, treatment, test results, plans for treatment and creates your PHI. Understanding what is in your record and how your PHI is used helps you to:

  • Ensure information in your recovery is correct.
  • Better understand who, what, when, where, why and how others may access your PHI.
  • Make more informed decisions when authorizing others access to your PHI.

The following describes the various ways in which we may use or disclose your PHI:


  • For planning, providing, coordinating or managing your care and treatment.
  • A means of communication among the health care professionals involved in your care/organization treatment (e.g. team members, specialists, laboratory, pharmacy).
  • Coordination or management of your health care with a third party that has already obtained your permission to have access to your PHI (authorization to release information or with a qualified business associates agreement). (e.g. primary care physician)


  • A means by which you or a third party payor can verify that services billed were actually provided.
  • Making a determination of eligibility/coverage of insurance benefits for health care services we recommend.
  • Reviewing services for medical necessity and/or utilization review activities (e.g., obtaining approval for a hospital stay may require review of PHI to obtain approval for the admission).
  • Forwarding psychiatric or substance information regarding your treatment to your insurance company to arrange payment for services provided to you or to prepare a bill to send to you or to the person responsible for your payment.


  • To support the business activities of Thrive Behavioral Health, these may include, but are not limited to quality assessment, program improvement, employee review activities, training, licensing, marketing and fundraising activities, facility planning and conducting or arranging for other business activities.
  • We may use a sign-in sheet at the registration desk where you will be asked to sign your name.
  • We may call you by name in the waiting room.
  • To contact you to remind/confirm your appointment or follow up on your visit.
  • To inform you of treatment alternatives or other health-related benefits and services that may be of interest to you.
  • Sharing PHI with third party “business associates”. There are some services provided in our organization through contracts.  Examples include laboratory testing, the liaison for inpatient treatment related services, drug/alcohol detoxification, legal counsel and transcription services.  When these services are contracted, we may disclose your PHI to our business associate so that they can perform the job we have asked them to do. These disclosures do not constitute a sale of PHI. To protect your PHI, however, we require the business associate to appropriately safeguard your information and abide by all requirements of the privacy rule.
  • We may contact you, at times to donate to a fundraising effort on our behalf. If we contact you for fundraising purposes, you will be provided with the opportunity to opt out of receiving further solicitations.

Use/disclosure of PHI based upon your written authorization

Other uses and disclosures of your PHI will be made only with your written authorization, unless otherwise permitted or required by law as described below.  You may revoke an authorization, at any time, in writing, except to the extent that your clinician or Thrive Behavioral Health has take action in reliance on the use or disclosure indicted in the authorization.

You have the opportunity to agree or object to the use/disclosure of all or part of your PHI.  If you are not present or able to agree or object to the use/disclosure of the PHI, then your clinician may, using professional judgment, determine whether the disclosure is in your best interest such as an emergent assessment.  In this case, only the PHI that is relevant to your health care will be disclosed.

Permitted and required use/disclosure of PHI that may be made without your consent, authorization or opportunity to object.

Emergencies: We may use or disclose your PHI in an emergency treatment situation and would be limited to only the information necessary.  If this happens, Thrive Behavioral Health shall try to obtain your consent as soon as reasonably practicable after the delivery of treatment.  We may also disclose limited PHI to a public or private entity that is authorized to assist in disaster relief efforts in order for that entity to locate a family member or other persons that may be involved in some aspect of caring for you.

Required by Law:  We may use/disclose your PHI to the extent that the use/disclosure is required by state law.  The use/disclosure will be made in compliance with the law and will be limited to the relevant requirements of the law. 

Required Reporting: State Law mandates reporting when there is:

  • Suspected child abuse and/or neglect to appropriate individuals. (CANTS-Child Abuse & Trauma Tracking System DCYF-Department for Children, Youth & Families)
  • Suspected elderly abuse and/or neglect to appropriate individuals. (DEA-Department of Elderly Affairs)

Health Oversight:  To a health oversight agency for activities authorized by law, such as audits, investigations, and inspections.  Oversight agencies seeking this information include accreditation and government agencies that oversee the healthcare system, government benefit programs, other government regulatory programs and civil rights laws.


Legal Proceedings:  In the course of any kind of judicial or administrative proceeding, in response to an order of the court or administrative tribunal (to the extent disclosure is expressly authorized), in certain conditions in response to a subpoena, discovery request or other lawful process.

Food and Drug Administration (FDA): We may disclose to the FDA health information concerning adverse effects with respect to medication, supplements and products.

Workers Compensation: We may disclose health information to Workers Compensation or other similar programs established by law to the extent authorized by and to the extent necessary to comply with these laws.

Public Health: As required by law, we may disclose your health information to public health or legal authorities charged with preventing or controlling disease, injury, or disability.

Coroners/Funeral Directors: We may disclose PHI to coroner or medical examiner for identification purposes, determining cause of death or for the coroner/medical examiner to perform other duties authorized by law.  We may also disclose PHI to a funeral director, as authorized by law, in order to permit the funeral director to carry out their duties

Communicable Diseases:  If authorized by law, to a person who may have been exposed to a communicable disease or may otherwise be at risk of contracting or spreading the disease or condition.

Research: Thrive Behavioral Health will sometimes work with other organizations to do research that helps determine if treatments are working or finding new ways to treat an illness. Any information obtained during research is strictly confidential, is only used for the intended purpose of the research, and research results will not directly identify you. If you are asked to be in a research study, you have the right to say no, and it will not affect your care here. If you choose to participate in research, further information will be provided to you.

Criminal Activities: Consistent with applicable federal/state laws, we may disclose your PHI, if we believe that the use or disclosure is necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public.

Correctional Institution: Should you be an inmate of a correctional institution, we may disclose to the institution or agents thereof health information necessary for your health and the health and safety of other individuals.

Law Enforcement: We may disclose health information for law enforcement purposes as required by law, in response to a valid subpoena and/or court order, or when a crime has been committed on the premises or against Thrive Behavioral Health   personnel.

Participation-Health Information Exchange:  We will disclose your health information when you voluntarily sign up to participate in Rhode Island’s Health Information Exchange (Currentcare) computerized network.