HIPAA Notice

Notice of Privacy Practices

This Notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

This Notice applies to protected health information, or PHI, that New Century Labs creates, receives, maintains, or transmits in connection with services covered by HIPAA.

Your health information rights

When it comes to your health information, you have certain rights. Depending on the information and applicable law, you may have the right to:

• Get an electronic or paper copy of health information we maintain about you.
• Ask us to correct health information you believe is incorrect or incomplete.
• Request confidential communications at a specific address, phone number, or communication method.
• Ask us to limit certain uses or disclosures. We are not always required to agree, but we will review the request.
• Get a list of certain disclosures of your health information, where required by law.
• Get a copy of this Notice at any time.
• Choose someone to act for you if they have legal authority, such as a medical power of attorney or guardianship.
• File a complaint if you believe your privacy rights have been violated.

Your choices

For certain health information, you can tell us your choices about what we share. For example, you may ask us to share information with a family member, caregiver, friend, or other person involved in your care or payment for your care.

We will not use or disclose your PHI for marketing purposes or sell your PHI without written authorization when HIPAA requires that authorization.

How we may use and disclose PHI

Treatment

We may use and disclose PHI to coordinate lab testing services, support ordering or reviewing providers, communicate results through appropriate channels, and assist with follow-up related to testing.

Payment

We may use and disclose PHI to bill and collect payment, process transactions, determine account status, and respond to payment-related questions.

Healthcare operations

We may use and disclose PHI to operate and improve our services, maintain records, conduct compliance activities, train personnel, manage vendors, and support quality, security, and customer service functions.

Business associates and service providers

We may share PHI with vendors and service providers who help us perform covered functions, subject to appropriate HIPAA agreements where required.

Required or permitted by law

We may use or disclose PHI when required or permitted by law, including for public health and safety, health oversight, legal proceedings, law enforcement, workers' compensation, coroners or medical examiners, and to avert a serious threat to health or safety.

Reproductive health privacy

Where applicable law requires, we may request a signed attestation before disclosing PHI potentially related to reproductive health care for certain law enforcement, health oversight, judicial, or administrative purposes.

Our responsibilities

• We are required by law to maintain the privacy and security of PHI when HIPAA applies.
• We will notify affected individuals following a breach of unsecured PHI when required by law.
• We must follow the duties and privacy practices described in this Notice while it is in effect.
• We will not use or disclose PHI other than as described here unless you authorize us in writing or the law allows or requires it.
• You may revoke an authorization in writing, except to the extent we have already relied on it.

We may update this Notice. Any revised Notice will apply to PHI we already have as well as information we receive in the future, unless the revised Notice says otherwise.

Questions and complaints

You may contact us with privacy questions or complaints at customerservice@newcenturylabs.com or (800) 519-2997.

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.