All information in the medical record and the Carls Center's patient care management system, inlcuding information about billing is confidential.  Except as required or permitted by law, medical record information and related personal health information (PHI) will not be released to anyone without the patient's authorization. 

A Notice of Privacy Practices is offered to each patient at their first visit.  It is also available on the CMU HIPAA website.