Privacy Policy
Notice of Privacy Practices
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Last updated April 2026
Who we are
Elizabeth Gordon Psychology is a solo private practice providing psychological services, including individual therapy for eating disorders, body image concerns, anxiety, perfectionism, and depression. Services are provided in person in Silver Spring, Maryland and virtually to clients in New York, Maryland, and all states covered by the PsyPact agreement.
Privacy Officer: Dr. Elizabeth Gordon, PsyD
Contact: drelizabethgordon@gmail.com | (240) 424-5511
Address: 8609 Second Ave, Suite 404B, Silver Spring, MD 20910
Protected health information (PHI) is information about you that may identify you and relates to your past, present, or future physical or mental health, the healthcare services you receive, or payment for those services. This includes information in your records and notes, billing information, and communications related to your care.
What is protected health information?
How we use and share your information
Treatment
We use your health information to provide therapy and related services. For example, your records may be used to document your treatment plan, session notes, or progress. In most cases, your psychotherapy session notes are kept separately from your general health record and require your written authorization before they can be shared with others.
Payment
We may use your health information for billing purposes. If you are seeking reimbursement from insurance, we may share relevant information — such as a diagnosis code and session dates — with your insurance company or your bank. We do not currently bill most insurance companies directly; most clients receive a superbill to submit independently.
Healthcare operations
We may use your information to support the business operations of this practice, such as quality improvement, training, or legal compliance. This practice does not use your information for marketing or sell your health information.
Uses that require your written authorization
Most other uses and disclosures of your health information require your written authorization. This includes:
Sharing your records with another provider, attorney, employer, or third party
Marketing purposes
Sale of your health information
Release of your psychotherapy notes (kept separately from the general medical record and subject to additional protections)
You may revoke an authorization at any time in writing, except where we have already acted on it.
Uses and disclosures that do not require your authorization
In certain circumstances, we may use or disclose your health information without your authorization, as required or permitted by law:
Safety and mandatory reporting
As a licensed psychologist, we are required by law to report certain situations, including: suspected abuse or neglect of a child, elder, or dependent adult; situations involving a serious and imminent threat to your safety or the safety of another person; and situations where a court order requires disclosure.
Public health
We may disclose information to public health authorities for activities such as disease reporting, as required by law.
Legal proceedings
We may disclose your health information in response to a court order, subpoena, or other lawful process, subject to applicable legal protections.
Oversight and regulation
We may disclose information to health oversight agencies, such as licensing boards, for audits or investigations.
Reproductive health information — additional protections
In accordance with the 2024 HIPAA Privacy Rule Final Rule, this practice will not use or disclose your protected health information for purposes related to investigating or penalizing you for seeking, obtaining, providing, or facilitating lawful reproductive health care. This protection applies regardless of the state in which the care was received.
Right to access your records
You have the right to inspect and receive a copy of your health information, with limited exceptions (such as psychotherapy notes and certain other records). Requests should be submitted in writing. We will respond within 30 days, with the possibility of a single 30-day extension. There may be a reasonable fee for copies.
Right to request an amendment
If you believe information in your record is incorrect or incomplete, you may request an amendment in writing. We may deny the request in certain circumstances but will explain the reason in writing.
Right to an accounting of disclosures
You may request a list of certain disclosures we have made of your health information. This right applies to disclosures made in the past six years, not including disclosures for treatment, payment, or healthcare operations.
Right to request restrictions
You may request that we restrict how we use or disclose your health information for treatment, payment, or healthcare operations purposes. We are not required to agree to your request in all cases, but will inform you of our decision.
Right to request confidential communications
You may request that we contact you in a specific way (for example, only by email or at a specific address). We will accommodate reasonable requests.
Right to a paper copy of this notice
You have the right to receive a paper copy of this Notice of Privacy Practices at any time, even if you have agreed to receive it electronically. Contact us to request a copy.
Right to file a complaint
If you believe your privacy rights have been violated, you may file a complaint with this practice or with the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.
To file a complaint with this practice: drelizabethgordon@gmail.com | (240) 424-5511
To file a complaint with HHS: www.hhs.gov/ocr/privacy/hipaa/complaints | 1-800-368-1019
Your rights regarding your health information
Our duties
We are required by law to maintain the privacy of your protected health information.
We are required to provide you with this Notice of Privacy Practices.
We are required to follow the terms of the notice currently in effect.
We are required to notify you if there is a breach of your unsecured protected health information.
We reserve the right to change the terms of this notice and make the new notice effective for all protected health information we maintain. We will post the current notice on our website and make copies available upon request.
Telehealth and virtual services
This practice provides therapy services virtually to clients in New York, Maryland, and all PsyPact-participating states. Virtual sessions are conducted through HIPAA-compliant platforms. The same privacy protections described in this notice apply to telehealth services. Please ensure you are in a private location during virtual sessions to protect your own confidentiality.
Questions and contact information
If you have questions about this notice or your privacy rights, please contact:
Dr. Elizabeth Gordon, PsyD — Privacy Officer
Elizabeth Gordon Psychology
8609 Second Ave, Suite 404B, Silver Spring, MD 20910
(240) 424-5511 | drelizabethgordon@gmail.com
Effective date: April 27, 2026