HIPAA Notice of Privacy Practices

Overview

Daymark Health must maintain privacy of health information and describes its practices in this notice. The policy applies to Daymark Health entities and affiliated organizations that function as a single covered entity under HIPAA. Staff, employees, and affiliated healthcare providers offering clinically integrated services are bound by these practices.

Your Rights

Access to Records: You may request paper or electronic copies of your medical records. Requests should be emailed to support@daymarkhealth.com or mailed to the Philadelphia address provided. Response typically occurs within 30 days, with reasonable fees allowed.

Amendment Requests: You may request corrections to inaccurate or incomplete health information. We are not required to agree to your request, but we will tell you in writing why we’ve denied within 60 days.

Confidential Communications: You can request specific contact methods, alternate addresses, or limited contact times. The organization will accommodate reasonable requests.

Limit Uses and Sharing: You may request restrictions on using or sharing your information for treatment, payment, or operations. Out-of-pocket payments allow you to restrict insurer sharing.

Accounting of Disclosures: Request a list of information sharing from the past six years. One annual accounting is free; additional requests incur reasonable fees.

Designated Representatives: Medical power of attorney holders or legal guardians may exercise your rights on your behalf.

File Complaints: Contact the Privacy Officer at support@daymarkhealth.com, call 866-799-7855, or mail inquiries to the Philadelphia address. You may also file with the U.S. Department of Health and Human Services Office for Civil Rights at 200 Independence Avenue, S.W., Washington, D.C. 20201, call 1-877-696-6775, or visit hhs.gov/ocr/privacy/hipaa/complaints/.

Your Choices

You may communicate preferences regarding:

• Appointment reminders
• Sharing limited information with family, friends, or care coordinators
• Information sharing for disaster relief
• Facility directory inclusion
• Fundraising contact
• Health information exchange (HIE) participation

When you cannot express preferences, the organization may share information if believed to be in your best interest or to prevent serious threats to health or safety.

Uses and Disclosures

Treatment: Health information is used to provide, coordinate, and manage your healthcare and related services, including sharing with oncologists and other care providers.

Payment: Information is used to bill and receive payment from insurers or other entities.

Operations: The organization may use or share information to conduct business operations, improve care quality, and contact you when necessary.

Business Associates:Limited health information is shared with outside vendors performing services on Daymark’s behalf.

Future Communications: The organization may contact you via newsletters, mailings, or other means regarding treatment options, disease management, wellness programs, research, and community initiatives.

Other Uses and Sharing

Public Health and Safety: Information may be shared for disease prevention, product recalls, adverse medication reactions, reporting abuse or neglect, and preventing serious health or safety threats.

Research: Health information may be used for research when researchers meet state and federal privacy protection requirements.

Legal Requirements: Information is shared when state or federal laws require it, including with the Department of Health and Human Services.

Legal Proceedings: Health information may be disclosed in response to court orders, administrative orders, subpoenas, discovery requests, and other lawful processes.

Organ and Tissue Donation: Information may be shared with organ procurement and transplantation organizations.

Medical Examiners and Funeral Directors: Information may be shared with coroners, medical examiners, or funeral directors as necessary for their duties.

Government and Law Enforcement:Information may be used for workers’ compensation, health oversight agencies, military and national security functions, and limited law enforcement purposes.

Our Responsibilities

Daymark Health must maintain privacy and security of protected health information and follow the practices described in this notice. The organization will not share or use information beyond what is described unless you provide written authorization, which you may revoke by emailing the Privacy Officer.

Breach Notification: We will notify you promptly if a breach occurs that may have compromised the privacy or security of your information.

Requiring Permission: Express written consent is required for marketing purposes (except discussing Daymark service eligibility), sale of information, and sharing psychotherapy notes.

Changes to This Notice

Daymark Health may modify these terms, with changes applying to all information held. Updated notices will be available upon request and on the website.

Affiliated Entities

• Daymark Health, Inc.
• Daymark Health (DE), LLC