Skip Navigation
Skip Main Content



The effective date of this Notice is October 28, 2021.



If you have questions about this Notice, please contact our Privacy Officer:

Mary Lou Klemencic, RHIT

(724) 378-4461 X-1172

Your patient record contains personal information about you and your health. The confidentiality of alcohol and drug misuse patient records is specifically protected by state and federal laws. This Notice of Privacy Practices describes how GRC & NKRC may use and disclose your protected health information (“PHI”), as well as your rights regarding your PHI. We reserve the right to change the terms of this Notice at any time by posting a copy on our website or by posting a copy at our facilities.  You may request a copy of the Notice at any time.

Note:   Some of the rights detailed below may not apply to you if you are an inmate in a correctional facility or are in lawful custody.

How We May Use and Disclose Health Information about You

Listed below are examples of the uses and disclosures that GRC & NKRC may make of your PHI.  The disclosure may be made verbally, in writing, or electronically, such as by email or text message.

Treatment.  We may use your PHI to provide, coordinate, or manage your care and any related services including sharing information with others outside of GRC & NKRC that we are consulting with or referring you to for your care, such as a specialist or a laboratory.

Payment.  Generally, we will obtain your authorization to use your PHI to obtain payment for your services.  We may use or disclose your PHI for such reasons as determining if you have insurance benefits, and if they will cover your treatment, processing claims with your insurance company, reviewing services provided to you to determine medical necessity, or undertaking utilization review activities.

Healthcare Operations.  We may use or disclose your PHI, as needed, to coordinate our business activities and to share PHI with third parties that provide services to us such as billing or computer services, quality assessment activities, employee review activities, training of students, or other services who have entered into a GRC & NKRC agreements promising to maintain the confidentiality of your PHI.

Contact with our Patients.   We may use or disclose your PHI for patient activities and to contact you.  We may also use a sign-in sheet at the registration desk where you will be asked to sign your name and indicate your physician or counselor. We may also call you by name in the waiting room when it is time to be seen. We may contact you by phone or text to remind you of your appointments.  We may leave voice messages at the telephone number you provide to us.  If you choose to have us contact you by text, texting charges may apply.  If we contact you, you can tell us to contact you in another way or opt out of future contacts.  We may contact you to provide information to you about treatment alternatives or other health-related benefits and services that may be of interest to you, or regarding GRC & NKRC’s fundraising activities.  Any fundraising materials will explain how you can inform us that you do not want to be contacted in the future.  We will format any mailings to you in a way that does not identify you as a substance misuse treatment client.

Required by Law.  We may use or disclose your PHI if it is required by law.  For example, we must make disclosures of your PHI to you upon your request and we must make disclosures to the Secretary of the Department of Health and Human Services for the purpose of investigating or determining our compliance with the Privacy Rule.  We may also disclose your PHI if a court issues a subpoena and appropriate order and follows required procedures.

Health Oversight.  We may disclose PHI to a health oversight agency for activities authorized by law, such as audits, investigations, licensure and accreditation inspections.  Oversight agencies seeking this information include government agencies and organizations that provide financial assistance to GRC & NKRC (such as third party payers) and peer review organizations performing utilization and quality control.

Medical Emergencies.  We may use or disclose your PHI in a medical emergency situation to medical personnel only.

Child Misuse or Neglect.  We may disclose your PHI to a state or local agency as authorized by law to receive reports of child misuse or neglect.  We only disclose necessary information to make the initial mandated report.

Deceased Clients.  We may disclose PHI of deceased clients for the purpose of determining the cause of death, in connection with laws requiring the collection of death or other vital statistics, or permitting inquiry into the cause of death.

Research.  Information that has no identifying information or is part of a limited data set may be used for research purposes without your authorization. PHI may only be disclosed for research purposes after a special approval process or with your authorization.

Court Order.  We may disclose your PHI if the court issues an appropriate order and follows required procedures.

Law Enforcement.  We may disclose your PHI to law enforcement officials if you have committed a crime on GRC & NKRC program premises or against GRC & NKRC program personnel.

Public Health.  We may use or disclose your PHI in certain limited circumstances to a public health authority authorized by law to collect or receive such information for purposes of preventing or controlling disease, injury or disability.

Rights Regarding Your PHI

Listed below are your rights.  Please contact our Privacy Officer via email if you have any questions.

Inspect and Copy Your PHI.You can view and get a copy of your PHI that is contained in a designated record set for as long as we maintain the record.  A “designated record set” contains medical and billing records and any other records that GRC & NKRC uses to make decisions about you.  If we maintain a copy of your PHI in an electronic format, then we will provide that PHI to you electronically upon your request.  We may charge you a reasonable cost-based fee for the copies. We can deny you access to your PHI in certain circumstances

Amend Your PHI. You may request, in writing, that we amend your PHI in your records. We may deny your request in certain cases.  You have a right to file a statement of GRC/NKRC disagreement with us.

Accounting of PHI Disclosures.  You may request an accounting of disclosures for certain other disclosures.  We may charge you a reasonable fee if you request more than one accounting in any 12-month period.

Restrictions on Disclosures and Uses of PHI.  You have the right to restrict disclosures of PHI to your health plan where you have paid for the services out of pocket and in full.  As a convenience to our patients, at some locations we offer text message appointment reminders.  There are privacy risks to texting and text messages may be accessed by others.  You may opt out of receiving text messages at any time by notifying Medical Records.

Confidential Communications. You have the right to request to receive confidential communications from us by alternative means or at an alternative location.  We will accommodate reasonable, written requests. We may also condition this request by asking you for information regarding how payment will be handled or specification of an alternative address or other method of contact.

Breach Notification.  If there is a breach of unsecured PHI concerning you, we may be required to notify you of this breach.

Complaints. You may file a complaint in writing to us by notifying our Privacy Officer.  We will not retaliate against you for filing a complaint.  You may also file a complaint with the U.S. Secretary of Health and Human Services at 200 Independence Avenue, S.W. Washington, D.C. 20201, or by calling 202-619-0257.

Notice to Substance Misuse Patients. The confidentiality of alcohol and drug misuse patient records is protected by federal law 42 USC 290dd-2 and 42 CFR Part 2. Generally, GRC & NKRC programs may not say to a person outside the GRC & NKRC program that a patient attends the GRC & NKRC program, or disclose any information identifying a patient as an alcohol or drug patient, unless: (1) the patient consents in writing; (2) the disclosure is allowed by a court order; (3) the disclosure is made to medical personnel in a medical emergency or to qualified personnel for research, audit, or GRC & NKRC program evaluation; (4) the patient commits or threatens to commit a crime either at the GRC & NKRC program or against any person who works for the GRC & NKRC program. Violation of federal regulations by a GRC & NKRC program is a crime. Suspected violations may be reported to the Privacy Officer or with Pennsylvania locations, call the Pittsburgh U.S. Attorney’s Office (412-644-3500) or with Ohio locations, call the Youngstown U.S. Attorney's Office (330-746-7974). Federal law and regulations do not protect any information about suspected child misuse or neglect from being reported under state law to appropriate state of local authorities.


PREA Internal Policies

The Prison Rape Elimination Act of 2003 (PREA)
The Prison Rape Elimination Act (PREA) was passed by Congress in 2003. The purpose of the act is to “provide for the analysis of the incidence and effects of prison rape in federal, state, and local institutions and to provide information, resources, recommendations and funding to protect individuals from prison rape.” The act applies to all public and private institutions that house adult or juvenile offenders and to community-based correctional agencies. Therefore, Gateway Rehab/Community Transition Centers (CTC) adheres to all PREA standards in its CTC facilities.

Gateway Rehab/Community Transition Centers Zero Tolerance Policy
Gateway Rehab/Community Transition Centers prohibits any form of sexual misuse and/or sexual harassment of its patients. Anyone who engages in, fails to report, or knowingly condones sexual harassment or sexual misuse of a patient shall be subject to disciplinary action and may be subject to criminal prosecution. A patient, employee, contract service provider, volunteer, and/or any individual who has business with Gateway Rehab/Community Transition Centers is subject to disciplinary action and/or sanctions, including possible dismissal and termination of contracts and/or services, if he/she is found to have engaged in sexual harassment or sexual contact with a patient.

How to Report Allegations of Sexual Abuse or Sexual Harassment
To report an allegation of sexual Misuse or sexual harassment on behalf of an individual in a CTC facility, you may contact the Agency PREA Coordinator at 412-604-8900 extension 2921. You may also contact the facility administration directly (see locations page for contact information). Reports can be made over the phone, in person, in writing, or anonymously if desired. A written report may also be sent to Office of State Inspector General (OSIG) at:

Attn: PREA Coordinator
Office of State Inspector General
555 Walnut Street, 8th Floor
Harrisburg, PA 17101

Employee Reporting Options
Employees of Gateway Rehab/Community Transition Centers may report sexual misuse or sexual harassment information to the Agency PREA Coordinator at 412-604-8900 extension 2921. They may also report sexual misuse or sexual harassment directly to the Employee Independent Hotline Service at 1-844-784-0012 or This is a confidential and anonymous service available 24 hours a day, 7 days a week.

All allegations of sexual misuse and/or sexual harassment are investigated promptly, thoroughly, and impartially. Appropriate disciplinary actions will be taken against any employee, contractor, volunteer, or individual in a Gateway Rehab/CTC facility if the allegation is found to be substantiated, up to and including possible criminal prosecution. Gateway Rehab/CTC will ensure that allegations of sexual misuse or sexual harassment are referred for investigation to an agency with the legal authority to conduct criminal investigations if the allegation involves potentially criminal behavior.

Annual PREA Reports

Braddock Audits

Erie Audits

Sheffield Audit