HIPAA Policy

This information is a detailed overview of how your protected health information (PHI) is used and disclosed, and how you can access your own medical records. Please review this vital information carefully.

NOTICE OF PRIVACY PRACTICES

Effective Date: Jan, 2025

This Notice of Privacy Practices describes how Pand Health, Inc. (“Pand Health,” “we,” “us,” or “our”) may use and disclose your protected health information (“PHI”) and how you can access that information. Please review it carefully.

Your HIPAA Rights: Take Control of Your Health Information

As a patient, you have fundamental rights regarding your medical information. You have the right to:

Access Your Records: Get an electronic or paper copy of your medical record and other health information we maintain.
Request Corrections: Ask us to amend your health information if you believe it is incorrect or incomplete.
Confidential Communications: Request that we contact you about medical matters in a specific way or at a different location (e.g., cell phone, specific mailing address).
Limit Sharing: Ask us to restrict the health information we share for treatment, payment, or healthcare operations.
Accounting of Disclosures: Get a list of others to whom we have shared your information.
Receive This Notice: Obtain a paper copy of this privacy notice at any time.
Designate a Representative: Choose someone to act on your behalf, such as a legal guardian or someone with medical power of attorney.
File a Complaint: Lodge a complaint if you believe your medical privacy rights have been violated.

Your Choices: How We Can Share Your Information

You have the power to decide how we use and share your health information in the following situations:

Family & Friends: Discuss your condition or care with your family, close friends, or other persons involved in your care.
Hospital Directory: Include your information in a hospital directory (if applicable).
Mental Health: Provide information related to mental health care.

Marketing & Sales: We will never share or sell your information for marketing purposes without your explicit written permission.

Our Uses and Disclosures: Why We Share Your Data

We may use and share your information as legally required or permitted to operate our practice, ensure your care, and contribute to public health:

Treat You: Share information with doctors, specialists, and other healthcare professionals involved in your treatment.
Run Our Operations: Use and share your information to manage our practice, improve the quality of your care, and contact you when needed.
Bill for Services: Share information to bill and receive payment from health plans and insurance providers.
Public Health & Safety: Use and share information for public good, such as: preventing disease, reporting product recalls, or lessening a serious threat to health or safety.
Research: Use and share information to participate in research (subject to strict legal conditions).
Legal Compliance: Share information as required by state or federal law.

Other Circumstances: Use and share information with medical examiners/funeral directors, for workers’ compensation, law enforcement requests, or in response to lawsuits and legal actions.

Your Rights: Take Control of Your Health Information

When it comes to your health information, you have certain rights. This section explains your rights and our responsibilities to help you access and control your data.

1. Access Your Records

- You can ask to see or get an electronic or paper copy of your medical record and other health information we have about you. Ask us how to do this.
- We will provide a copy or a summary of your information, usually within 30 days of your request. A reasonable, cost-based fee may apply.

2. Request Corrections

- You can ask us to correct health information about you that you believe is incorrect or incomplete. Ask us how to do this.
- We may say “no” to your request, but we will always tell you why in writing within 60 days.

3. Request Confidential Communications

- You can ask us to contact you in a specific way (e.g., home or office phone) or to send mail to a different address.
- We will say “yes” to all reasonable requests.

4. Limit What We Use or Share

- You can ask us not to use or share certain health information for treatment, payment, or our operations. We are not required to agree to all requests, and we may say “no” if it would affect your care.
- Special Right for Out-of-Pocket Payments: If you pay for a service or health care item out-of-pocket in full, you can ask us not to share that information for the purpose of payment or our operations with your health insurer. We will agree to this unless a law requires us to share it.

5. Get a List of Disclosures (Accounting)

- You can ask for a list of who we’ve shared your health information with and why, for up to six years prior to your request.
- We provide one accounting per year for free. We will include all disclosures except those for treatment, payment, health care operations, and those you requested.

6. Get a Copy of This Privacy Notice

- You can ask for a paper copy of this notice at any time, even if you previously agreed to receive it electronically. We will provide you with a paper copy promptly.

7. Choose a Representative

- If you have given someone medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your health information.
- We will verify their authority before taking any action.

8. File a Complaint

- If you feel we have violated your privacy rights, you can file a complaint by contacting us using this information:

- - Pand Health Attn: Privacy Officer
  - 11500 W. Olympic Blvd., Suite 399
  - Los Angeles, CA 90064
  - (888)710-7263

- You can also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by sending a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201, calling 1-877-696-6775, or visiting hhs.gov/ocr/privacy/hipaa/complaints/.
- We will not retaliate against you for filing a complaint.

Your Choices and Special Protections

You have the power to direct us on how we share your health information in certain situations. If you have a clear preference for limiting how we share, please speak with us, and we will follow your instructions.

Your Right to Choose

In these cases, you have the right to tell us whether or not to:

Share information with family, close friends, or others involved in your care.
Share information during a disaster relief situation.
Include your information in a hospital directory.

If you are unable to communicate your preference (for example, if you are unconscious), we may share your information if we believe it is in your best interest or is needed to prevent a serious and imminent threat to health or safety.

Commitment to Protecting Sensitive Data

We are absolutely committed to protecting your most sensitive health information (PHI).

Marketing and Sales: We will never share or sell your information for marketing purposes without your explicit written permission.
Fundraising: We will never contact you for fundraising efforts.
Treatment Records: We will never share any treatment records without your explicit written permission for:
- Marketing purposes
- Sale of your information
- Most sharing of psychotherapy notes

Special Categories of Information

In many circumstances, we must provide more restrictive privacy treatment for certain information, including: psychotherapy notes, genetic testing information, information on persons with developmental disabilities, information concerning HIV/AIDS testing, and alcohol and drug treatment. We will never share this information, including any treatment records, without your written permission or unless otherwise permitted or required by law.

Our Uses and Disclosures

We use or share your health information primarily in the following ways to support your care and run our operations:

Treat You
We can use and share your health information with other healthcare professionals involved in your treatment.
Example: Your doctor shares your health history with a specialist to coordinate your care.
Run Our Organization (Healthcare Operations)
We use and share your information to manage our practice, improve the quality of your care, and contact you when necessary.
Example: We use your health information to review and improve our services.

Bill for Your Services (Payment)

We use and share your health information to bill and receive payment from health plans or other responsible entities.

Example: We send information about your services to your health insurer so they can pay your claim.

Other Circumstances for Sharing Your Health Information

We are allowed or required by law to share your information in other ways, primarily for the public good, such as public health and research.

Public Health and Safety Issues
We can share your information in certain situations to protect public health and safety, such as:
- Preventing disease.
- Reporting adverse reactions to medications or product recalls.
- Reporting suspected abuse, neglect, or domestic violence.
- Preventing or reducing a serious threat to anyone’s health or safety.
Research
We will never use or share your information for health research without your written permission.
Comply with the Law
We will share information if required by state or federal laws, including disclosures to the Department of Health and Human Services, to ensure we are complying with federal privacy law.
Medical Examiner or Funeral Director
We can share health information with a coroner, medical examiner, or funeral director when an individual passes away.
Government Requests and Law Enforcement

We can use or share health information for:
- Workers’ compensation claims.
- Law enforcement purposes.
- Health oversight activities authorized by law.
- Special government functions (e.g., military, national security).
Lawsuits and Legal Actions
We can share your health information in response to a court or administrative order, or a subpoena.

For more information on these uses, please see: hhs.gov/civil-rights/index.html.

Our Commitment: Your HIPAA Privacy and Data Security

Your protected health information (PHI) is our top priority. We are legally and ethically required to ensure the privacy and security of your PHI.

Our core responsibilities to you include:

Maintaining Security: We are required by law to maintain the privacy and robust security of your protected health information.
Breach Notification: We will promptly notify you if a breach occurs that may have compromised the privacy or security of your data.
Adherence to Practices: We strictly follow the duties and HIPAA privacy practices described in this notice, and a copy is available to you at any time.
Information Control: We will not use or share your information outside of what is described here unless you give us explicit written permission. You can revoke this permission in writing at any time.

For more details on your rights, please visit the U.S. Department of Health and Human Services Office for Civil Rights at hhs.gov/civil-rights/index.html

Updates to This Privacy Notice

We may update the terms of this notice, and these changes will apply to all information we maintain about you. The newest version of the notice will be made available promptly upon request, at our office location, and on our website.

Notice of Privacy Practices: