I recommend that interested parties  check out my webpages to learn some about my approach to make sure we are a good fit.

• About
• Redefining Psychosis Model
• Articles
• A New Definition of Psychosis

The best ways to get my attention is to call the number below or click the picture to the right and leave me a message on my contact page. I try to be fair, but letting me know that you’ve read some of my work and multiple phone calls do help get my attention. I want to serve everybody, but finding people who are a good fit is mutually beneficial.

415-888-2451

HIPAA Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION.

MY LEGAL DUTY TO SAFEGUARD YOUR PROTECTED HEALTH INFORMATION (PHI). 

By law I am required to ensure that your PHI is kept private. The PHI constitutes information created or noted by me that can be used to identify you. It contains data about your past, present, or future health or condition, the provision of health care services to you, or the payment for such health care. I am required to provide you with this Notice about my privacy procedures. This Notice explains when, why, and how I would use and/or disclose your PHI. Use of PHI means when I share, apply, utilize, examine, or analyze information within my practice; PHI is disclosed when I release, transfer, give, or otherwise reveal it to a third party outside my practice. With some exceptions, I may not use or disclose more of your PHI than is necessary to accomplish the purpose for which the use or disclosure is made; however, I am always legally required to follow the privacy practices described in this Notice.

Please note that I reserve the right to change the terms of this Notice and my privacy policies at any time as permitted by law. Any changes will apply to PHI already on file with me. Before I make any important changes to my policies, I will immediately change this notice and post a new copy of it in my office and on my website. You may also request a copy of this Notice from me, or you can view a copy of it in my office or on my website, which is located at www.timdreby.com. 

HOW I WILL USE AND DISCLOSE YOUR PHI. 

I will use and disclose your PHI for many different reasons. Some of the uses or disclosures will require your prior written authorization; others, however, will not. Below you will find the different categories of my uses and disclosures, with some examples.

1. Uses and Disclosures Related to Treatment, Payment, or Health Care Operations Do Not Require Your Prior Written Consent. I may use and disclose your PHI without your consent for the following reasons:
2. To obtain payment for treatment. When I obtain your insurance information I request a signature that allows me to send your PHI to your insurance company or health plan in order to get payment for the health care services that I have provided to you. I would only do so in the event that they request them in an audit. I could also provide your PHI to business associates, such as billing companies, claims processing companies.

2.. Other disclosures. If you are unconscious or in severe pain, but I think that you would consent to such treatment if you could, I may disclose your PHI.

1. Certain Other Uses and Disclosures Do Not Require Your Consent. I may use and/or disclose your PHI without your consent or authorization for the following reasons:
2. When disclosure is required by federal, state, or local law; judicial, board, or administrative proceedings; or, law enforcement. Example: I may make a disclosure to the appropriate officials when a law requires me to report information to government agencies, law enforcement personnel and/or in an administrative proceeding.
3. If disclosure is compelled by a party to a proceeding before a court of an administrative agency pursuant to its lawful authority. 
4. If disclosure is required by a search warrant lawfully issued to a governmental law enforcement agency. 
5. If disclosure is compelled by the patient or the patient’s representative pursuant to California Health and Safety Codes or to corresponding federal statutes of regulations, such as the Privacy Rule that requires this Notice.
6. To avoid harm. I may provide PHI to law enforcement personnel or persons able to prevent or mitigate a serious threat to the health or safety of a person or the public
7. If disclosure is compelled or permitted by the fact that you are in such mental or emotional condition as to be dangerous to yourself or the person or property of others, and if I determine that disclosure is necessary to prevent the threatened danger. 
8. If disclosure is mandated by the California Child Abuse and Neglect Reporting law. For example, if I have a reasonable suspicion of child abuse or neglect.
9. If disclosure is mandated by the California Elder/Dependent Adult Abuse Reporting law. For example, if I have a reasonable suspicion of elder abuse or dependent adult abuse.
10. If disclosure is compelled or permitted by the fact that you tell me of a serious/imminent  threat of physical violence by you against a reasonably identifiable victim or victims.
11. For public health activities. Example: In the event of your death, if a disclosure is permitted or compelled, I may need to give the county coroner information about you.
12. For health oversight activities. Example: I may be required to provide information to assist the government during an investigation or inspection of a health care organization or provider.
13. For specific government functions. Examples: I may disclose PHI of military personnel and veterans under certain circumstances. Also, I may disclose PHI in the interests of national security, such as protecting the President of the United States or assisting with intelligence operations.
14. For Workers’ Compensation purposes. I may provide PHI to comply with Workers’ Compensation laws.
15. Appointment reminders and health related benefits or services. Examples: I may use PHI to provide appointment reminders.
16. If an arbitrator or arbitration panel compels disclosure, when arbitration is lawfully requested by either party, pursuant to subpoena duces tectum (e.g., a subpoena for mental health records) or any other provision authorizing disclosure in a proceeding before an  arbitrator or arbitration panel.
17. If disclosure is required or permitted to a health oversight agency for oversight activities authorized by law. Example: When compelled by U.S. Secretary of Health and Human Services to investigate or assess my compliance with HIPAA regulations.
18. Other Uses and Disclosures Require Your Prior Written Authorization. I will request your written authorization before using or disclosing any of your PHI. Even if you have signed an authorization to disclose your PHI, you may later revoke that authorization, in writing, to stop any future uses and disclosure of your PHI by me.

WHAT RIGHTS YOU HAVE REGARDING YOUR PHI These are your rights with respect to your PHI:

6. The Right to See and Get Copies of Your PHI. In general, you have the right to see your PHI that is in my possession, or to get copies of it; however, you must request it in writing. You will receive a response from me within 30 days of my receiving your written request. I believe reading records that are written to justify payment can be very triggering. Thus, if I am concerned that reviewing all your records may do you harm, I may feel I must deny your request. Instead, I suggest that we review a sample of your record together to see how you might handle this experience. This way I can see and assess the potential for harm before you incur the considerable charge that comes with copying all your records. If you ask for copies of your PHI, I will charge you 25 cents per page plus postage. In some cases, we might agree that I write up a summary explanation of the PHI instead for an agreed upon fee. I can send PHI to you through my encrypted G-SUITE email with a BAA for a fee of $6.50. This is an option that makes this process less burdensome for both of us.
7. The Right to Choose How I Send Your PHI to You. It is your right to ask that your PHI be sent to you at an alternate address (for example, sending information to your work address rather than your home address) or by fax or encrypted drive. I have encrypted email through G-SUITE with a BAA agreement so I can send out your PHI through email provided up to 25 MB per email for a flat fee of $6.50 once we have determined this is safe for you between us.
8. The Right to Get a List of the Disclosures I Have Made. I am willing to tell you about any disclosures I have made about you even if you have consented for such disclosures. I intend to be as transparent as I can be. However, if it is a matter of national security or if the department of corrections offers me a subpoena by a judge, I don’t believe I am allowed to share that information with you.
9. The Right to Amend Your PHI. If you believe that there is some error in your PHI or that important information has been omitted, it is your right to request that I correct the existing information or add the missing information. Your request and the reason for the request must be made in writing. You will receive a response within 60 days of my receipt of your request. I may deny your request, in writing, if I find that: the PHI is correct and complete, or if I believe the correction is inaccurate. My denial must be in writing and must state the reasons for the denial. It must also explain your right to file a written statement objecting to the denial. If you do not file a written objection, you still have the right to ask that your request and my denial be attached to any future disclosures of your PHI. If I approve your request, I will make the change(s) to your PHI. Additionally, I will tell you that the changes have been made, and I will advise all others who need to know about the change(s) to your PHI.
10. The Right to Get This Notice by E-mail. You have the right to get this notice by e-mail. You have the right to request a paper copy of it, as well.

HOW TO COMPLAIN ABOUT MY PRIVACY PRACTICES If I may have violated your privacy rights, or if you object to a decision I made about access to your PHI, you are entitled to file a complaint with me at tim@specialmessages7.com. You may also send a written complaint to the Secretary of the Department of Health and Human Services at 200 Independence Avenue S.W. Washington, D.C. 20201. If you file a complaint about my privacy practices, I will take no retaliatory action against you. 

NOTIFICATIONS OF BREACHES 

In the case of a breach, Timothy C Dreby is required to notify each affected individual whose unsecured PHI has been compromised. Even if such a breach was caused by a business associate, Timothy C Dreby is ultimately responsible for providing the notification directly or via the business associate. If the breach involves more than 500 people, the Officer for Civil Rights must be notified in accordance with instructions posted on its website. Timothy C Dreby bears the ultimate burden of proof to demonstrate that all notifications were given or that the impermissible use or disclosure of PHI did not constitute a breach and must maintain supporting documentation, including documentation pertaining to the risk assessment.

PHI AFTER DEATH 

Generally, PHI excludes any health information of a person who has been deceased for more than 50 years after the date of death. I may disclose deceased individuals’ PHI to non-family members, as well as family members, who were involved in the care or payment for healthcare of  the decedent prior to death; however, the disclosure must be limited to PHI relevant to such care or payment and cannot be inconsistent with any prior expressed preference of the deceased individual.

1. Notice of Privacy Policies 

Timothy C Dreby Notice of Privacy Policies must contain a statement indicating that most uses and disclosures of psychotherapy notes, marketing disclosures and sale of PHI do require prior authorization by you, and you have the right to be notified in case of a breach of unsecured PHI.

1. EFFECTIVE DATE OF THIS NOTICE  

This notice went into effect on March 21, 2026