Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Our Commitment to Your Privacy

Regen MDs (“we,” “our,” or “us”) is committed to protecting the privacy of your protected health information (“PHI”) — information that may identify you and that relates to your past, present, or future physical or mental health condition, the care we provide to you, or payment for that care.

We are required by law to:

• Maintain the privacy of your protected health information;
• Provide you with this Notice describing our legal duties and privacy practices regarding your PHI;
• Notify you following a breach of unsecured protected health information; and
• Abide by the terms of the Notice currently in effect.

This Notice applies to all records of your care generated or maintained by Regen MDs, including through in-person visits, telehealth consultations, and our website and patient communications.

How We May Use and Disclose Your Health Information

The following describes the ways we may use and disclose your PHI. Not every use or disclosure is listed, but all permitted uses and disclosures fall within one of the categories below.

For Treatment

We may use and disclose your PHI to provide, coordinate, or manage your healthcare and related services. This includes sharing information with physicians, nurses, pharmacists, laboratories, and other providers involved in your care. For example, we may share your medical history and treatment plan with a pharmacy to fill a prescription, or with a laboratory to process ordered tests.

For Payment

We may use and disclose your PHI to obtain payment for the services we provide. For example, we may include information about your treatment when billing you or processing a payment, or share information with a payment processor to complete a transaction.

For Health Care Operations

We may use and disclose your PHI for our operations, which are necessary to run our practice and ensure quality care. For example, we may use your information to review and improve the quality of our services, train staff, conduct internal audits, or perform business management and administrative activities.

Business Associates

We may disclose your PHI to third parties — known as “business associates” — that perform services on our behalf, such as billing companies, telehealth and electronic health record platforms, IT and data-storage providers, and similar vendors. We require these business associates, by written agreement, to appropriately safeguard your information.

Appointment Reminders, Treatment Alternatives, and Health-Related Information

We may contact you to provide appointment reminders, to tell you about treatment alternatives, or to share other health-related benefits or services that may be of interest to you.

Individuals Involved in Your Care

Unless you object, we may share relevant PHI with a family member, friend, or other person you identify as involved in your care or payment for your care.

Uses and Disclosures Permitted or Required Without Your Authorization

We may use or disclose your PHI without your authorization in the following circumstances, to the extent permitted or required by law:

• As required by law, including federal, state, or local law;
• Public health activities, such as reporting disease, injury, vital events, or adverse events related to products regulated by the U.S. Food and Drug Administration;
• Health oversight activities, such as audits, investigations, and licensure actions by oversight agencies;
• Judicial and administrative proceedings, in response to a court order, subpoena, or other lawful process;
• Law enforcement purposes, as permitted by applicable law;
• To avert a serious threat to the health or safety of you or the public;
• Coroners, medical examiners, and funeral directors, as necessary to carry out their duties;
• Organ and tissue donation, where applicable;
• Research, subject to applicable privacy protections and approvals;
• Workers’ compensation, as authorized by and necessary to comply with workers’ compensation laws;
• Military, veterans, national security, and protective services, as authorized by law;
• Inmates or individuals in custody, to a correctional institution or law enforcement official as permitted by law.

Uses and Disclosures Requiring Your Written Authorization

Other uses and disclosures of your PHI not described in this Notice will be made only with your written authorization. This includes, except as otherwise permitted by law:

• Most uses and disclosures for marketing purposes;
• Any disclosure that constitutes a sale of your PHI;
• Uses and disclosures of psychotherapy notes, where applicable.

If you provide us with an authorization, you may revoke it in writing at any time, except to the extent we have already acted in reliance on it.

Your Rights Regarding Your Health Information

You have the following rights regarding the PHI we maintain about you:

• Right to Inspect and Copy. You may request to inspect and obtain a copy of your health and billing records, in paper or electronic form where readily producible. We may charge a reasonable, cost-based fee.
• Right to Request an Amendment. If you believe information in your record is incorrect or incomplete, you may request that we amend it. We may deny your request under certain circumstances, in which case you may submit a statement of disagreement.
• Right to an Accounting of Disclosures. You may request a list of certain disclosures we have made of your PHI, other than disclosures for treatment, payment, healthcare operations, and certain other exceptions.
• Right to Request Restrictions. You may request a restriction on how we use or disclose your PHI. We are not required to agree to all requests; however, if you pay for a service or item in full out of pocket, you may request that we not disclose that information to your health plan, and we will honor that request unless otherwise required by law.
• Right to Request Confidential Communications. You may request that we communicate with you about medical matters in a certain way or at a certain location (for example, by mail to a specific address).
• Right to a Paper Copy of This Notice. You may request a paper copy of this Notice at any time, even if you have agreed to receive it electronically.
• Right to Be Notified of a Breach. You have the right to be notified in the event of a breach of your unsecured PHI.

To exercise any of these rights, please submit your request in writing to the contact listed below.

Our Responsibilities

We are required by law to maintain the privacy and security of your PHI, to provide you with this Notice of our legal duties and privacy practices, to follow the terms of the Notice currently in effect, and to notify you if a breach occurs that may have compromised the privacy or security of your information.

Changes to This Notice

We reserve the right to change this Notice and to make the revised Notice effective for PHI we already have about you as well as any information we receive in the future. The current Notice will be posted on our website and available at our office, with the effective date noted at the top. We will provide a copy of the revised Notice upon request.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us using the contact information below, or with the Secretary of the U.S. Department of Health and Human Services, Office for Civil Rights. You will not be retaliated against in any way for filing a complaint.

Contact Us

If you have any questions about this Notice or wish to exercise any of your rights, please contact our Privacy Officer: