HIPAA Notice of Privacy Practices
Effective Date: September 2024 • Last Revised: October 2026 • Governing Covered Entity: New Britain Pharmacy LLC
HIPAA Compliant
45 CFR § 164.520 Safeguards
256-Bit SSL/TLS
End-to-End PHI Encryption
State Licensed
CT Dept. of Consumer Protection
1. Our Legal Duty & Pledge to Protect Your PHI
New Britain Pharmacy is required by the Health Insurance Portability and Accountability Act of 1996 (HIPAA), the Health Information Technology for Economic and Clinical Health (HITECH) Act, and Connecticut state law to maintain the privacy of your Protected Health Information (PHI). We are legally obligated to provide you with this Notice of our legal duties and privacy practices with respect to PHI under 45 CFR § 164.520, and to notify affected individuals following a breach of unsecured protected health information in accordance with 45 CFR §§ 164.400–414.
2. How We May Use and Disclose Protected Health Information (PHI)
Under federal regulations, we may use and disclose your health information without your prior written authorization for the following primary healthcare operations:
Treatment & Patient Care
We use your PHI to dispense prescription medications, review your profile for harmful drug interactions or allergies, consult with your prescribing physician or nurse practitioner, and provide clinical medication therapy management.
Billing & Payment Claims
We disclose your prescription and insurance information to your health plan, pharmacy benefit manager (PBM), Medicare Part D, or Connecticut Medicaid (Husky Health) to verify coverage, obtain prior authorizations, and process claims.
Healthcare Operations
We utilize internal records to audit clinical quality, train our technicians and pharmacists, perform medication therapy reviews, maintain encrypted digital audit logs, and comply with state board of pharmacy licensing requirements.
Mandatory Public Health Reporting
As required by Connecticut statutes, we submit mandatory vaccine records to the Connecticut State Immunization Registry (CT WiZ) and report controlled substance dispensations to the Connecticut Prescription Monitoring Program (CPMP).
3. Uses Requiring Your Explicit Written Authorization
For any purpose other than treatment, payment, healthcare operations, or mandatory public health disclosures required by law, we will obtain your specific written authorization before using or disclosing your PHI. We will never sell your health information, disclose your medical profile to third-party marketing companies, or use your data for advertising without your express consent. You have the right to revoke an authorization in writing at any time.
4. Your Individual Rights Under the HIPAA Privacy Rule
As a patient of New Britain Pharmacy, federal law guarantees you the following explicit rights regarding your medical and prescription records:
- Right to Inspect & Obtain an Electronic Copy: You have the right to review and obtain an electronic or printed copy of your prescription profile, dispensing history, and billing records within 30 days of written request.
- Right to Request Restrictions: You may request restrictions on certain uses and disclosures of your PHI for treatment, payment, or healthcare operations. While we are not always required by law to agree, if you pay for a prescription completely out-of-pocket, you have the right to demand we not disclose that claim to your health insurer.
- Right to Confidential Communications: You have the right to request that we communicate with you via alternate contact methods or at specific phone numbers/addresses (e.g., requesting delivery notification via cell phone rather than home landline).
- Right to an Accounting of Disclosures: You may request a list of certain disclosures our pharmacy made of your health information outside routine treatment, payment, and healthcare operations.
- Right to a Paper Copy: You may obtain a physical, printed copy of this Notice of Privacy Practices at our pharmacy counter at 46 Broad St at any time upon request.
5. Digital Platform Security Safeguards (Technical & Administrative)
To ensure the complete confidentiality, integrity, and availability of electronic protected health information (ePHI), New Britain Pharmacy implements strict Technical, Physical, and Administrative safeguards under the HIPAA Security Rule (45 CFR Part 164, Subpart C):
• Cryptographic Encryption: All electronic prescription submissions, refill requests, and patient intake forms are encrypted in transit using industry-standard TLS 1.3 cryptographic protocols with 256-bit encryption.
• Role-Based Access Control: Access to patient dispensing records is strictly restricted to licensed pharmacists, registered pharmacy technicians, and credentialed clinical staff.
• Zero Third-Party Ad Trackers: Our digital platforms do not employ commercial advertising cookies, tracking pixels, or third-party behavioral trackers on patient prescription or refill intake pages.
• Business Associate Agreements (BAAs): All digital infrastructure vendors, electronic fax platforms, and cloud hosts must execute a formal Business Associate Agreement agreeing to uphold strict HIPAA physical and technical safeguards.
6. Pharmacy Privacy Officer & Complaint Process
If you have questions about this Notice of Privacy Practices or believe your privacy rights have been violated, you may file a written complaint with our Pharmacy Privacy Officer. You also have the right to file a complaint with the Secretary of the U.S. Department of Health and Human Services (Office for Civil Rights).
Non-Retaliation Policy: Federal law strictly prohibits retaliation against any individual for filing a privacy complaint or exercising their statutory rights under HIPAA.
New Britain Pharmacy — Privacy Officer Contact
• Designated Officer: Supervising Pharmacist / Privacy Officer
• Physical Address: 46 Broad St, New Britain, CT 06053
• Telephone: (860) 223-0522 • Fax: (860) 223-0822
• HIPAA Compliance Inquiries: privacy@newbritainpharmacy.com (or nbctrx@gmail.com)
Notice: Standard email communications are not encrypted. Please do not submit confidential medical diagnoses, prescription numbers, or credit card numbers via unencrypted email. Use our secure online refill portal or call our pharmacy staff directly.