HIPAA Notice of Privacy Practices
M.A.M.A. Community Foundation, Inc.
Effective December 4, 2025
This Notice describes how certain health information about you or your child may be used and disclosed, and how you can access this information. Please review it carefully.
Although M.A.M.A. Community Foundation, Inc. (“MCF”) is not a medical provider, we may receive limited health-related information (“Protected Health Information” or PHI) when you participate in certain programs, including doula support, lactation counseling, or childbirth education. In these programs, we are committed to safeguarding your privacy in accordance with applicable federal and state laws, including the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), when PHI is collected or maintained.
This Notice of Privacy Practices (“NPP”) explains how we use, disclose, and protect such information.
MCF Responsibilities
MCF is required by law to:
Maintain the privacy of PHI we receive or create in connection with our programs
Provide you with this Notice of Privacy Practices
Follow the terms of this Notice
Notify you in the event of a breach of unsecured PHI
All staff, contractors, birth workers, lactation professionals, and volunteers with access to PHI are required to maintain confidentiality and follow MCF’s privacy standards.
How We May Use and Disclose Your PHI Without Your Authorization
Certain uses and disclosures do not require your written permission. Examples include:
1. For Care Coordination and Support
MCF may use or disclose PHI to support your participation in programs such as:
Doula support
Lactation counseling
Educational or supportive services
This may include communication with:
Your other providers involved in your care (with your consent where required)
MCF staff or contractors assisting with your program participation
2. For Payment or Eligibility Purposes
If applicable, MCF may use or disclose PHI:
To determine eligibility for publicly funded programs
To bill Medicaid or other payers when appropriate
To comply with documentation requirements for reimbursed services
3. For MCF Operations
MCF may use or disclose PHI for:
Training of staff or volunteers
Quality assessment and program improvement
Accreditation and reporting requirements
Evaluation, audit, or funding compliance
Any non-MCF individuals assisting with operations must agree to protect confidentiality.
4. When Required by Law
MCF may disclose PHI without authorization to comply with legal obligations, including:
Public health reporting (preventing or controlling disease, reporting birth/death statistics)
Reporting suspected abuse, neglect, or domestic violence
Government oversight activities (audits, inspections, investigations)
Legal proceedings (court orders, subpoenas)
Law enforcement purposes, if legally permitted
To avert a serious threat to health or safety
5. For Specialized Government Functions
MCF may disclose PHI for:
Military or veterans’ affairs, if applicable
National security or intelligence activities, as legally authorized
6. Coroners, Medical Examiners, or Funeral Directors
If needed to identify a decedent or determine cause of death.
7. Workers’ Compensation
As required for work-related injury claims.
8. To Individuals Involved in Your Care
MCF may disclose PHI to family members or individuals involved in your or your child’s care when appropriate and in your best interest, especially if you are unavailable or unable to provide consent.
Uses and Disclosures That Require Your Written Authorization
MCF will not use or disclose your PHI for any of the following without your explicit written permission:
Sharing PHI with individuals or providers not involved in your care
Marketing purposes
Sale, exchange, or rental of PHI
Disclosure of substance use, psychotherapy, or mental health notes (if collected)
You may revoke an authorization at any time by submitting a written request to info@mamacommunity.org. Revoking authorization does not apply to disclosures already completed under the previous authorization.
Your Rights Concerning Your PHI
You have the following rights:
1. Right to Access Your Records
You may request to inspect or receive a paper or electronic copy of PHI we maintain.
A reasonable fee may apply for copying or mailing.
2. Right to Request Restrictions
You may request that we limit the use or disclosure of your PHI.
MCF is not required to agree to all requests, except:
When you fully pay for a service out-of-pocket
When you request that related PHI not be shared with a health plan
3. Right to Request Confidential Communications
You may request communication through preferred methods such as mail, email, or a specific phone number. We will accommodate reasonable requests.
4. Right to Amend Your Records
If information is incorrect or incomplete, you may request an amendment.
MCF will respond in writing and may deny requests in limited situations.
5. Right to an Accounting of Disclosures
You may request a list of disclosures of your PHI made by MCF during the past six (6) years, except those made for treatment, payment, or operations.
6. Right to a Paper or Electronic Copy of This Notice
The most current version is always available on www.mamacommunity.org.
7. Right to File a Complaint
If you believe your privacy rights have been violated, you may file a complaint with:
MCF at info@mamacommunity.org
The U.S. Department of Health and Human Services (HHS)
MCF will not retaliate against you for filing a complaint.
Email Communications
MCF takes reasonable precautions to secure email communication. However:
Email may not be fully secure
Unencrypted email may expose data
If you prefer not to communicate PHI by email, please notify us at info@mamacommunity.org, and we will arrange an alternative method.
Changes to This Notice
MCF may revise this Notice of Privacy Practices at any time.
Updates will be posted on our website, and the effective date will be revised.
The updated Notice applies to all PHI we maintain at the time of change.
If you have questions about this Notice or would like to exercise your privacy rights, please contact:
