hipaa notice

Notice of Privacy Practices

Model notice for covered entities · Effective January 1, 2026

Template — covered entities must review and adapt. This is a model HIPAA Notice of Privacy Practices intended for adaptation by covered entities using the Peek Health platform. It is not legal advice and must be reviewed by qualified US healthcare privacy counsel before it is distributed to patients.

About this notice

  • This is a model Notice of Privacy Practices under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and 45 CFR 164.520.
  • Peek Health is a business associate that processes Protected Health Information (“PHI”) on behalf of maternity care providers (“covered entities”). The covered entity that delivers your care is responsible for providing you with its own Notice of Privacy Practices; this document is a template that covered entities may adapt to reference the Peek Health platform.
  • THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

How PHI processed via Peek Health may be used and disclosed

  • Treatment: your clinical team may use your postpartum check-in responses to inform your care and follow-up.
  • Payment: PHI is not used by Peek Health for payment activities and is not disclosed to payers.
  • Health care operations: your care team may use aggregated, de-identified insights derived from check-in responses to improve care quality, monitor population health, and evaluate services, consistent with 45 CFR 164.506(c)(1).
  • Business associate services: Peek Health processes PHI solely to provide the Services to your care team, under a signed Business Associate Agreement.
  • Required by law: PHI may be disclosed when required by federal, state, or local law, including public health reporting, in accordance with 45 CFR 164.512.
  • De-identified information: Peek Health may create de-identified information from PHI (using the HIPAA Safe Harbor method, 45 CFR 164.514(b)) for population-health analytics. De-identified information is not PHI and may be used and disclosed without restriction.
  • Sale of PHI: Peek Health does not sell PHI. Marketing communications using PHI will not be sent without your prior written authorization.

Your HIPAA rights

  • Right of access: you may request to inspect and obtain a copy of your PHI held by your provider (45 CFR 164.524).
  • Right to amend: you may request an amendment to PHI that you believe is inaccurate or incomplete (45 CFR 164.526).
  • Right to an accounting of disclosures: you may request a list of certain disclosures of your PHI made in the six years prior to your request (45 CFR 164.528).
  • Right to request restrictions: you may request restrictions on certain uses and disclosures of your PHI (45 CFR 164.522(a)).
  • Right to confidential communications: you may request that we communicate with you in a specific way or at a specific location (45 CFR 164.522(b)).
  • Right to a paper copy of this notice: you may request a paper copy at any time.
  • Right to be notified of a breach: you have the right to be notified of any breach of your unsecured PHI, in accordance with 45 CFR 164.400–414.
  • To exercise any of these rights, contact your healthcare provider directly. Rights of access and amendment must be handled by the covered entity, not by Peek Health.

Complaints

  • If you believe your privacy rights have been violated, you may file a complaint with your healthcare provider or with the U.S. Department of Health and Human Services, Office for Civil Rights, at https://www.hhs.gov/ocr/complaints/. You will not be retaliated against for filing a complaint.

Changes to this notice

  • Your provider reserves the right to change this notice and to make the revised notice effective for PHI already held. The current notice will be posted in the provider’s office and, where applicable, on their website.

Contact

  • Questions from covered entities about the Peek Health platform and this template: hello@peekhealth.com.
  • Patients: please contact your healthcare provider’s Privacy Officer for questions about your PHI.