HIPAA PRIVACY NOTICE

(Health Insurance Portability & Accountability Act)

Last Updated: [August 30, 2022]

THIS NOTICE OF PRIVACY PRACTICES (“NOTICE”) DESCRIBES HOW HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED BY ZING HEALTH, INC. AND ITS AUTHORIZED AGENTS (COLLECTIVELY, “ZING”, “WE,” OR “US”) AND HOW YOU CAN GET ACCESS TO THE INFORMATION. PLEASE READ CAREFULLY.

YOUR Privacy is Important to US

We value our relationship with you. We respect your right to privacy, and we do everything we can to protect the information provided to us on behalf of our members. We ask all employees to follow our policies and procedures about member privacy and information sharing.

“Protected Health Information” or “PHI” includes any individually identifiable information that is transmitted or maintained in any form or medium, that relates to the past, present, or future physical or mental health condition of an individual, or the provision or payment of health care to an individual that is created or received by a health care provider, health plan, employer, or health care clearinghouse.

We Protect our Member’s Privacy:

• We restrict access to electronic PHI by using protected passwords when using company information systems
• We do not leave member PHI open or in view at workstations when our employees are not there. We lock up our member files before leaving the workplace.
• We share member PHI with employees only as needed to provide services to the member.

Your Personal Health Information Rights Are Protected

The Health insurance Portability Act (“HIPAA”) is a set of federal regulations which safeguard the privacy and security of your Protected Health Information and establishes certain rights with respect to your Protected Health Information.

Your Choices

For certain health information, you can tell us your choices about what we share.
If you have a clear preference for how we share your information in the situations described below, let us know. Tell us what you want us to do, and we will follow your instructions.

In these cases, you have both the right and choice to tell us to:

• Share information with your family, close friends, or others involved in your care
• Share information in a disaster relief situation
• Contact you for fundraising efforts

If you are not able to tell us your preference, for example if you are unconscious, we may go ahead and share your information if we believe it is in your best interest. We may also share your information when needed to lessen a serious and imminent threat to health or safety.

In these cases, we never share your information unless you give us written permission:

• Marketing purposes
• Sale of your information

Our Uses and Disclosures of Your Protected Health Information

We typically use and share your PHI in the following ways:

• Treat you
1. We can use your PHI and share it with other professionals who are treating you.
• Run our organization
1. We can use and share your PHI to run our organization, improve your care and contact you when necessary.
2. We are not allowed to use genetic information to decide whether we will give you coverage and the price of that coverage.
• Pay for your health services
1. We can use and disclose your health information as we pay for your health services.

How Else Can We Use and Disclose Your Protected Health Information?

We are allowed or required to share your information in other ways- usually in ways that can contribute to the public good, such as public health and research. These ways are listed below:

• Help with public health and safety issues
We can share health information about you for certain situations such as:
1. Preventing disease
2. Helping with product recalls
3. Reporting adverse reactions to medications
4. Reporting suspected abuse, neglect, or domestic violence
5. Preventing or reducing a serious threat to anyone’s health or safety
• Do research
1. We can use or share your information for health research.
• Comply with the law
We will share information about you if state or federal laws require it, including with the Department of Health and Human Services if it wants to see that we are complying with federal privacy law.
• Respond to organ and tissue donation requests and work with a medical examiner or funeral director
1. We can share health information about you with organ procurement organizations.
2. We can share health information with a coroner, medical examiner, or funeral director when an individual dies.
• Address workers’ compensation, law enforcement, and other government requests
We can use or share health information about you:
1. For workers’ compensation claims
2. For law enforcement purposes or with a law enforcement official
3. With health oversight agencies for activities authorized by law
4. For special government functions such as military, national security, and presidential protective services.
5. Respond to lawsuits and legal actions.

We can share health information about you in response to a court or administrative order, or in response to a subpoena.

We will not use or disclose your Protected Health Information for any purpose not specified in this Notice without your written authorization. The written authorization we obtain will specifically identify the particular purpose of the use or disclosure, the information being used or disclosed, the person(s) receiving the information, and the time frame that the authorization is valid. If you give us your written authorization you may revoke it at any time, in which case we will no longer use or disclose your Protected Health Information for this purpose, except to the extent we have already relied on your authorization. You are not required to sign an authorization form and we will not deny you health services if you refuse to do so.

Our Responsibilities

• We are required by law to maintain the privacy and security of your Protected Health Information.
• We will let you know promptly if a breach occurs that compromised the privacy or security of your unsecured PHI.
• We must follow the duties and privacy practices described in this Notice and give you a copy of it.
• We will not use or share your PHI other than as described here unless you tell us we can in writing. If you tell us we can, you may change your mind at any time. Let us know in writing if you change your mind.

For more information see:

http://www.hhs.gov/ocr/privacy/hipaa/understanding/consumers/noticepp.html

Changes to the Terms of this Notice

We can change the terms of this Notice, and the changes will apply to all PHI we have about you. The new notice will be available upon request, on our website, and we will mail a copy to you.

Contact information

If you have any questions about your rights regarding the privacy and confidentiality of your PHI, please contact the Zing Customer Service Department at 1-866-946-4458.

For specific inquiries about this Zing HIPAA Privacy Notice, please contact: