HIPAA Notice of Privacy Practices

Overview & Compliance

This Notice describes how Ethovia Health may use and disclose your health information and describes your rights under the Health Insurance Portability and Accountability Act (HIPAA) and the Health Information Technology for Economic and Clinical Health (HITECH) Act.

Ethovia Health is committed to protecting the privacy of your health information. We are required by law to:

• Maintain the privacy and security of your protected health information (PHI)
• Provide this notice of our privacy practices
• Notify you if there is an unauthorized access or disclosure of your information
• Follow the terms of this notice

What is Protected Health Information (PHI)?

Protected Health Information is any health information in your medical or billing records that can identify you, including:

• Name, address, phone number, email, and date of birth
• Medical history and conditions
• Medication records and pharmacy refill history
• Diagnostic and laboratory test results
• Wellness assessment data and health measurements
• Insurance information and payment records
• Any notes or communication from our healthcare providers

How We Use & Disclose PHI

Uses and Disclosures with Your Consent (or Authorization)

With your written authorization, we may use or disclose your PHI for purposes other than treatment, payment, or healthcare operations. You may revoke this authorization at any time in writing.

Uses Without Authorization (Permitted by Law)

• Treatment: To provide, coordinate, and manage your healthcare services
• Payment: To process insurance claims, bill for services, and collect payments
• Healthcare Operations: To manage our business, including quality improvement, training, and compliance
• As Required by Law: To respond to court orders, subpoenas, or other legal processes
• Public Health: To report adverse events, product defects, or communicable diseases as required
• Abuse or Neglect: To report suspected abuse, neglect, or exploitation of vulnerable individuals
• Law Enforcement: To assist law enforcement with legitimate inquiries
• Health Oversight: To comply with health oversight agencies and regulators

No Sale of Information

We do not sell your protected health information. We do not disclose your PHI for marketing or advertising purposes unless you explicitly authorize it.

Your Privacy Rights

1. Right to Access & Obtain Copies

You have the right to inspect and obtain a copy of your health information. We will provide this within 30 days or explain why we cannot.

2. Right to Amend or Correct Information

You may request corrections to inaccurate information in your medical records. Submit requests in writing; we will respond within 30 days.

3. Right to Request Restrictions

You may request restrictions on how we use or disclose your information. We are not required to agree to all requests.

4. Right to Request Confidential Communications

You may request that we communicate with you about your health information using alternative methods (e.g., email instead of phone calls).

5. Right to Accounting of Disclosures

You may request a list of disclosures we have made of your PHI. This request must be in writing and can be made once per year at no charge.

6. Right to Notice & Notification

You have the right to receive this Notice and to be notified of any unauthorized access or disclosure of your information.

How to Exercise Your Rights

To exercise any of these rights, submit a written request to our Privacy Officer at the address listed below. Include your name, date of birth, and specific request details.

Complaints & Enforcement

Filing a Complaint with Ethovia Health

If you believe we have violated your privacy rights, you may file a complaint with us. Submit a written complaint to our Privacy Officer (contact information below).

Filing a Complaint with HHS

You also have the right to file a complaint with the U.S. Department of Health & Human Services (HHS) Office for Civil Rights. Complaints may be filed:

• Online: HHS OCR Complaint Portal
• By Mail: U.S. Department of Health & Human Services, Office for Civil Rights, 200 Independence Avenue, S.W., Washington, D.C. 20201
• By Phone: 1-800-HHS-TIPS (1-800-447-8477)

You will not be penalized or retaliated against for filing a complaint.

Business Associates

Our Business Associates (vendors and service providers) are contractually obligated to comply with HIPAA. We remain responsible for their compliance with this Privacy Notice.