THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION.

PLEASE REVIEW IT CAREFULLY.

I. Who We Are

This Notice of Privacy Practices (“Notice”) describes the privacy practices of MedRising, LLC and its affiliates, including certain affiliated professional entities, their physicians, healthcare practitioners, and other personnel (“we” or “us”).

II. Our Privacy Obligations

We are required by law to maintain the privacy of your health information (“Protected Health Information” or “PHI”) and to provide you with this Notice of our legal duties and privacy practices regarding your PHI. We are also obligated to notify you following a Breach of unsecured PHI. When we use or disclose your PHI, we are required to follow the terms of this Notice (or other notice in effect at the time of the use or disclosure).

III. Permissible Uses and Disclosures Without Your Written Authorization

In certain situations, which we describe in Section IV below, we must obtain your written authorization to use or disclose your PHI. However, we do not need authorization for the following uses and disclosures:

A. Uses and Disclosures for Treatment, Payment, and Health Care Operations

We may use and disclose your PHI, but not your “Highly Confidential Information” (defined in Section IV.B below), for the following:

1. Treatment: We may use and disclose your PHI to provide treatment, such as diagnosing and treating your condition. We may also disclose PHI to other healthcare providers involved in your treatment.

2. Payment: In most cases, we may use and disclose your PHI to obtain payment for services provided.

3. Healthcare Operations: We may use and disclose your PHI for our healthcare operations, including internal administration, planning, and quality improvement activities. For example, we may use PHI to evaluate our practitioners’ competence. We may also disclose PHI to resolve any complaints you may have.

We may also disclose PHI to other healthcare providers as necessary for their treatment, payment, or certain healthcare operations.

B. Disclosure to Relatives, Close Friends, and Other Caregivers

We may disclose your PHI to a family member, close friend, or other person identified by you, under specific conditions. If you are not present or are unable to agree or object due to incapacity or an emergency, we may disclose your PHI if, based on professional judgment, it is in your best interest.

C. Public Health Activities

We may disclose your PHI for public health activities, including reporting diseases, child abuse, product issues, or exposure to communicable diseases.

D. Victims of Abuse, Neglect, or Domestic Violence

If we believe you are a victim of abuse, neglect, or domestic violence, we may disclose your PHI to a government authority as authorized by law.

E. Health Oversight Activities

We may disclose your PHI to a health oversight agency responsible for overseeing compliance with government health programs.

F. Judicial and Administrative Proceedings

We may disclose your PHI in response to a legal order or other lawful process.

G. Law Enforcement

We may disclose your PHI to law enforcement officials as required or permitted by law.

H. Decedents

We may disclose your PHI to a coroner, medical examiner, or funeral director as authorized by law.

I. Research

We may use or disclose your PHI for research purposes if an Institutional Review Board or Privacy Board approves a waiver of authorization.

J. Health or Safety

We may use or disclose your PHI to prevent a serious threat to health or safety.

K. Specialized Government Functions

We may disclose your PHI to certain government agencies, such as the U.S. military or Department of State, in specific circumstances.

L. Workers’ Compensation

We may disclose your PHI as authorized by state law for workers’ compensation purposes.

M. As Required By Law

We may use and disclose your PHI when required by law.

IV. Uses and Disclosures Requiring Your Written Authorization

A. Use or Disclosure with Your Authorization

We must obtain your written authorization for certain uses and disclosures of PHI, including for marketing purposes or disclosures that constitute the sale of PHI. Other uses and disclosures not described in this Notice will require your written permission on an authorization form.

B. Uses and Disclosures of Your Highly Confidential Information

Federal and state law requires additional privacy protections for certain sensitive information, including mental health, HIV/AIDS, substance abuse, and genetic testing. We require your specific authorization to disclose this information.

C. Revocation of Your Authorization

You may revoke your Authorization at any time, except where we have relied on it, by delivering a written statement to our Privacy Officer.

V. Your Rights Regarding Your Protected Health Information

A. For Further Information and Complaints

For further information about your privacy rights or to file a complaint, please contact our Compliance and Privacy Officer at privacy@medrisinghealth.com. We will not retaliate against you for filing a complaint.

B. Right to Request Additional Restrictions

You have the right to request restrictions on the use and disclosure of your PHI for treatment, payment, and healthcare operations or to specific individuals involved in your care. We are required to comply with requests to restrict PHI disclosures to a health plan if you pay for the services out of pocket in full.

C. Right to Receive Confidential Communications

You may request, and we will accommodate, reasonable requests to receive your PHI by alternative means or at alternative locations.

D. Right to Inspect and Copy Your Health Information

You may request access to your medical and billing records to inspect and copy them. If you would like to access your records, please submit a request to privacy@medrisinghealth.com. A fee may apply for copies.

E. Right to Request to Amend Your Records

You may request amendments to your PHI. Submit an Amendment Request Form to privacy@medrisinghealth.com if you believe records should be corrected.

F. Right to Receive an Accounting of Disclosures

You have the right to request a list of certain disclosures of your PHI for up to six years. If you request an accounting more than once in twelve months, we may charge a fee.

G. Right to Receive a Copy of this Notice

Upon request, you may obtain a copy of this Notice by email or in paper format.

VI. Effective Date and Duration of This Notice

A. Effective Date

This Notice is effective as of Nov 2nd, 2024.

B. Right to Change Terms of this Notice

We may change the terms of this Notice at any time and will post the new notice on our website at medrisinghealth.com. You may also request a new notice by contacting info@medrisinghealth.com.

VII. Privacy Officer

You may contact the Privacy Officer at:

MedRising, LLC

ATTN: Privacy Officer

Email: info@medrisinghealth.com