This document outlines the privacy practices of a medical office regarding protected health information (PHI). It states that the office is required by law to maintain privacy of PHI and provide notice of its privacy policies. It describes how PHI may be used for treatment, payment, and healthcare operations. It also discusses how individuals can file complaints about potential privacy violations and exercise their rights regarding PHI, including requesting restrictions on uses/disclosures, confidential communications, and access to/amendments of their records.