Madison Avenue Website Privacy Notice

Effective Date: 10/19/2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

A. OUR POLICY REGARDING YOUR HEALTH INFORMATION

We are committed to preserving the privacy and confidentiality of your health information. This Privacy Notice describes how David Woo M.D., P.C. d/b/a Madison Avenue TMS & Psychiatry (“the Practice”) may use and disclose your protected health information according to applicable laws and regulations. It also describes your rights with respect to your protected health information. Your “protected health information” includes most information about your physical and mental health, such as symptoms, treatment, test results, and demographic data, which contains details that can be used to identify you. We are required by law to maintain the privacy of your “protected health information,” to provide you with this notice of our legal duties and privacy practices, and to notify you following a breach of your unsecured protected health information.

We reserve the right to change this notice and to make the revised notice effective for all protected health information that we maintain at that time and any information we may receive in the future. We will notify you about any change in this notice that materially affects your rights under it. We will post a copy of the current notice in our facility and we will make the notice available for you to request a copy at any time. We are required to abide by the terms of this notice while it remains in effect, including any future revisions that we may make to the notice as required or authorized by law.

B. USES AND DISCLOSURES WITH AND WITHOUT YOUR AUTHORIZATION

We must obtain your written permission or “Authorization” to use or disclose your protected health information except in the limited situations listed below, which do not require your written Authorization:

1. Treatment: We will use and disclose your protected health information to provide, coordinate and manage your health care and related services. We may disclose your protected health information to health care providers, including providers not affiliated with the Practice, so that they may provide you with treatment. For example, we may disclose your protected health information to a pharmacy to fill a prescription, to a laboratory to order a test, or to a specialist for a consultation. 45 C.F.R. § 164.512.

2. Payment: We will use and disclose your protected health information, as needed, for the Practice to obtain payment for our health care services. For example, we may disclose protected health information to your health insurance company so we may obtain prior approval for a surgery, to determine whether you are eligible for benefits or to determine whether a particular service is covered under your plan. We may also disclose your protected health information to other health care providers, health plans, or health care clearinghouses for their payment activities. For example, we may disclose protected health information to anesthesia care providers so that they may obtain payment for their services. 45 C.F.R. § 164.512.

3. Health Care Operations: We will use and disclose your protected health information in connection with our health care operations. For example, we may use your protected health information to evaluate the performance of the Practice’s personnel and to perform licensing, training, and accreditation activities, and we may disclose your protected health information to vendors and businesses that assist us with our administrative needs (subject to their obligation to maintain the privacy of your protected information, if legally required). In certain situations, we may also disclose your protected health information to another health care provider, health plan, or health care clearinghouse that has or had a relationship with you, for the purpose of that entity’s health care operations, as long as the protected health information is related to your relationship with that entity. For example, the Practice may disclose your protected health information to allow another entity to conduct activities to determine whether it has provided quality services, to review the performance and qualifications of health care providers, to conduct training programs, and to perform accreditation, certification, licensing or credentialing activities. 45 C.F.R. § 164.512.

4. Law Enforcement Purposes: We may disclose your protected health information to law enforcement officials under certain circumstances when we are required or permitted by law to disclose such information. For example, we may disclose your protected health information if we are required by law to report a certain type of wound or injury, such as a gunshot wound. We may also disclose your protected health information pursuant to an order, warrant, subpoena or summons issued by a judicial officer. Under certain circumstances, we may disclose your protected health information pursuant to administrative requests related to law enforcement purposes. We may disclose limited protected health information to law enforcement officials upon their request to assist them in identifying or locating a suspect, fugitive, material witness or missing person. Additionally, under certain circumstances we may disclose your protected health information to law enforcement officials if you are suspected to be the victim of a crime or in order to report evidence of criminal conduct that occurred on our premises. 45 C.F.R. § 164.512.

5. Public Health Activities: The Practice may disclose your protected health information to certain public health authorities and others according to specific rules that apply to public health activities. For example, the Practice may disclose your protected health information to public health authorities or other government authorities authorized by law to receive such information for purposes of preventing or controlling disease, injury, disability, or child abuse or neglect or for the conduct of public health surveillance, investigations and interventions. We may also disclose your protected health information to certain individuals subject to the jurisdiction of the Food and Drug Administration regarding FDA-regulated products or activities, to certain individuals who may be at risk of contracting or spreading a disease or condition, and under certain circumstances to your employer if we have provided health care to you at your employer’s request. 45 C.F.R. § 164.512.

6. Health Oversight Activities: We may disclose your protected health information to a health oversight agency for activities authorized by law, such as audits, investigations, inspections, and licensure actions. 45 C.F.R. § 164.512.

7. Lawsuits and Other Legal Proceedings: We may disclose your protected health information in the course of judicial or administrative proceedings in response to an order of a court or administrative tribunal, or in response to a subpoena, discovery request, or other lawful process, under certain circumstances. 45 C.F.R. § 164.512.

8. Research: We may use or disclose deidentified forms of your protected health information for research purposes, provided that certain conditions are met. 45 C.F.R. § 164.512.

9. Coroners, Medical Examiners, and Funeral Directors: We may disclose your protected health information to a coroner or medical examiner for identification purposes, determining cause of death, or other duties as authorized by law. We may also disclose your protected health information to a funeral director, as authorized by law, to permit the funeral director to carry out their duties. 45 C.F.R. § 164.512.

10. Organ and Tissue Donation: We may use or disclose your protected health information to organ procurement organizations or other entities engaged in the procurement, banking, or transplantation of organs, eyes, or tissue for the purpose of facilitating donation and transplantation. 45 C.F.R. § 164.512.

11. Serious Threats to Health or Safety: We may use or disclose your protected health information to prevent or lessen a serious and imminent threat to the health or safety of a person or the public. 45 C.F.R. § 164.512.

12. Specialized Government Functions: We may disclose your protected health information for specialized government functions, such as for national security and intelligence activities, for protective services for the President or other authorized persons, or for the military and veterans. 45 C.F.R. § 164.512.

13. Workers’ Compensation: We may disclose your protected health information to comply with workers’ compensation laws and other similar programs that provide benefits for work-related injuries or illnesses. 45 C.F.R. § 164.512.

14. Family and Friends: We may disclose to your family members or friends health information directly relevant to their involvement in your care or payment for your care, if you agree verbally or we give you the opportunity to object and you do not. We may also disclose health information to family or friends if we can reasonably infer, based on the circumstances and our professional judgment, that you would not object. For example, if you bring a spouse into the exam room during treatment or while treatment is discussed. The opportunity to consent may be obtained retroactively in emergency situations. 45 C.F.R. § 164.510.

15. Required by Law: In addition to those uses and disclosures listed above, we may use and disclose your protected health information if and to the extent we are required by law.

16. We will never use or disclose health information about you without your permission for the following purposes, subject to all applicable legal requirements and limitations.

  • Psychotherapy Notes. Disclosure of “psychotherapy notes” as defined in 45 CFR § 164.501, may not be used or disclosed without your prior authorization unless the use or disclosure is:
    • For our use in treating you.
    • For our use in training or supervising mental health practitioners to help them improve their skills in group, joint, family, or individual counseling or therapy.
    • For our use in defending the Practice in legal proceedings instituted by you.
    • For use by the Secretary of Health and Human Services to investigate the Practice’s compliance with HIPAA.
    • Required by law and the use or disclosure is limited to the requirements of such law.
    • Required by law for certain health oversight activities pertaining to the originator of the psychotherapy notes.
    • Required by a coroner who is performing duties authorized by law.
    • Required to help avert a serious threat to the health and safety of others.
  • Substance Use Disorder (SUD) Counseling Notes. If we have substance use disorder patient records about you, subject to 42 CFR part 2, we cannot use or share information in those records in civil, criminal, administrative, or legislative investigations or proceedings against you without (1) your consent or (2) a court order and a subpoena.
  • Marketing Purposes. Your personal health information will not be used or disclosed for marketing purposes.
  • Sale of PHI. Your personal health information will never be sold.

Other Uses: Authorization is required before the Practice may disclose psychotherapy notes, uses and disclosures for marketing purposes, and disclosures that constitute a sale of your personal health information. The Practice may not use or disclose your protected health information for any reason not described in this Privacy Notice. 45 C.F.R. § 164.520(b)(1)(ii)(E).

C. YOUR RIGHTS

You have the following rights regarding your protected health information:

1. Right to Revoke an Authorization: You may revoke an Authorization in writing, at any time. To request a revocation, you must submit a written request to the Practice’s Privacy Contact, whose contact information is listed below in part D of this Privacy Notice. 45 C.F.R. § 164.522.

2. Right to Request Restrictions on Uses and/or Disclosures: You may request restrictions on the use and/or disclosure of your protected health information, or of certain parts of your protected health information, for treatment, payment or health care operations. You may also request that we not disclose your protected health information to family members or friends who may be involved in your care or for notification purposes as described in section (14) of this Privacy Notice, titled “Friends and Family.” To request restrictions, you must submit a written request to the Practice’s Privacy Contact. In your written request, you must identify the specific restriction requested and identify who you want the restrictions to apply to. The Practice is not obligated to agree to any of your requested restrictions. If we deny your request to a restriction, we will notify you. If the Practice agrees to the requested restriction, we will restrict the use and/or disclosure of your protected health information as you requested. 45 C.F.R. § 164.522.

3. Right to Request Confidential Communications: You may request to receive confidential communications of your protected health information from us by alternative means or at an alternative location. For example, you may request that we contact you only at your work telephone number or by mail to a post office box. To request confidential communications, you must submit a written request to the Practice’s Privacy Contact. We will not ask you the reason for your request, and we will accommodate all reasonable requests. Your request must specify how or where you wish to be contacted. 45 C.F.R. § 164.522.

4. Right to Access Your Protected Health Information: You may request to inspect or obtain a copy of your protected health information. This right does not apply to certain health information, including psychotherapy notes, SUD Counseling Notes, and information compiled for legal proceedings. To request access to your protected health information, you must submit a written request to the Practice’s Privacy Contact. If you request a copy of your health information, we may charge you a fee for the costs of copying, mailing, or other costs incurred by us in complying with your request. 45 C.F.R. § 164.524.

5. Right to Amend Your Protected Health Information: You may request an amendment of your protected health information that is in your medical records. To request an amendment, you must submit a written request to the Practice’s Privacy Contact, and you must provide a reason that supports your request. In certain cases, we may deny your request for an amendment. If the Practice denies your request for amendment, we will notify you in writing. 45 C.F.R. § 164.526.

6. Right to an Accounting of Disclosures: You may request an accounting of disclosures of your protected health information made by the Practice in the six (6) years prior to the date of your request. This right does not apply to certain disclosures, including disclosures made for treatment, payment, or health care operations, made to you, made pursuant to an Authorization, and other certain disclosures. To request an accounting of disclosures, you must submit a written request to the Practice’s Privacy Contact. If you request more than one accounting in a twelve (12) month period, we may charge you a fee for the costs of providing the accounting. 45 C.F.R. § 164.528.

7. Right to a Paper Copy of this Privacy Notice: You may request a paper copy of this Privacy Notice, even if you have agreed to receive this notice electronically. To request a paper copy of this Privacy Notice, please submit a request to the Practice’s Privacy Contact. 45 C.F.R. § 164.520.

D. PRIVACY CONTACT

The Practice’s contact person for all issues regarding patient privacy and your rights under the Federal privacy standards is the Privacy Contact. Questions regarding matters covered by this Notice shall be directed to the Privacy Contact. You may contact the Privacy Contact at:

David Woo, M.D.
515 Madison Ave, Suite 2310
New York, New York 10022
(212) 731-2033

E. COMPLAINTS

If you believe your privacy rights have been violated, you may file a complaint with the Practice by submitting it in writing to the Privacy Contact listed in part D of this Privacy Notice. You may also file a complaint with the Secretary of the U.S. Department of Health and Human Services, Office for Civil Rights: 200 Independence Avenue, S.W., Washington, D.C. 20201, telephone 1-800-368-1019, or online at www.hhs.gov/ocr/complaints/. 45 C.F.R. § 164.520(b)(1)(vi).

The Practice will not retaliate against you for filing a complaint.