Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Who this notice applies to

This Notice describes the privacy practices of Nina Jung, L.Ac. and JungWay Acupuncture & Integrative Wellness ("we," "us," "our," or the "Practice"). It applies to all protected health information ("PHI") about you that we create, receive, or maintain in connection with your care.

We are required by federal law (the Health Insurance Portability and Accountability Act of 1996, or "HIPAA"), where applicable, and by California law (including the California Confidentiality of Medical Information Act, or "CMIA," Civil Code §56 et seq.) to maintain the privacy of your PHI, to provide you with this Notice, and to follow the terms of the Notice currently in effect.

How we may use and disclose your health information

The following describes the categories of uses and disclosures we may make without your specific written authorization, subject to California requirements that may require your consent in some circumstances.

For treatment

We may use your PHI to provide acupuncture care and East Asian medicine services to you, to consult with other healthcare providers involved in your care (such as your physician, midwife, or other practitioners), and to coordinate referrals. For example, with your consent we may share treatment information with a referring provider to coordinate your care.

For payment

We may use and disclose your PHI to obtain payment for the services we provide. For example, we may use your information to prepare and send invoices, to verify insurance coverage if applicable, or to collect on an unpaid balance.

For healthcare operations

We may use and disclose your PHI to operate the Practice. This includes activities such as scheduling, quality assessment and improvement, reviewing the competence of practitioners, and administrative activities required to run the Practice.

To people involved in your care

With your consent, we may share information directly relevant to your care with a family member, friend, or other person you identify. If you are unable to give consent because of incapacity or emergency, we will use professional judgment to determine whether sharing the information is in your best interest.

As required by law

We will disclose your PHI when required to do so by federal, state, or local law. This includes mandated reporting of suspected child abuse, elder or dependent adult abuse, certain communicable diseases, and other situations specifically required by law.

To business associates

Some services are provided to the Practice through contracts with business associates. Examples include our scheduling and recordkeeping platform (Jane App). When we share PHI with a business associate, we require them by written agreement to safeguard your information.

Public health, safety, and other permitted disclosures

We may disclose PHI for public health activities, to report victims of abuse or neglect, for health oversight activities, in response to a court order or subpoena, to coroners or medical examiners, to law enforcement when required, or to avert a serious threat to health or safety.

California-specific protections

California law provides additional protections for certain categories of medical information. We follow these stricter California rules in addition to HIPAA:

• Mental health, substance use disorder, HIV/AIDS, and genetic information have additional restrictions on disclosure under California and federal law. We will not disclose this information without your specific written authorization except in narrow circumstances expressly permitted by law.
• Minors. California law gives minors the right to consent to certain types of healthcare without parental involvement. Information related to care a minor has consented to may not be disclosed to the minor's parent or guardian without the minor's authorization, in accordance with California law.
• Marketing and the sale of medical information. California law and HIPAA both require your specific written authorization before we may use your PHI for marketing or sell it. We do not sell your medical information.

Uses and disclosures that require your written authorization

Other uses and disclosures of your PHI, beyond those described above, will be made only with your written authorization. You may revoke an authorization in writing at any time, except to the extent we have already relied on it.

Your rights

You have the following rights with respect to your PHI:

• Right to inspect and copy. You may request to inspect and obtain a copy of your medical records. We may charge a reasonable fee for copies as permitted by law. We will respond to a written request within the timeframes required by California and federal law.
• Right to amend. If you believe information in your record is incorrect or incomplete, you may request that we amend the record. We may deny the request if the information was not created by us, is not part of the records we maintain, or is accurate and complete, and we will explain our reasons in writing.
• Right to an accounting of disclosures. You have the right to request a list of certain disclosures of your PHI made for purposes other than treatment, payment, or healthcare operations.
• Right to request restrictions. You may request that we restrict certain uses or disclosures of your PHI. We will consider your request but are not required to agree in all cases. We are required to honor a request to restrict a disclosure to a health plan if the disclosure relates to a service for which you have paid out of pocket in full.
• Right to confidential communications. You may request that we communicate with you about your health information in a specific way or at a specific location. We will accommodate reasonable requests.
• Right to a paper copy of this Notice. You have the right to receive a paper copy of this Notice on request, even if you have agreed to receive it electronically.
• Right to be notified of a breach. You have the right to be notified following any breach of your unsecured PHI.

To exercise any of these rights, contact us using the information at the bottom of this Notice. Requests should generally be made in writing.

Our duties

We are required by law to:

• Maintain the privacy of your PHI.
• Provide you with this Notice describing our legal duties and privacy practices with respect to PHI we collect and maintain about you.
• Follow the terms of the Notice currently in effect.
• Notify you in the event of a breach of unsecured PHI.

We reserve the right to change this Notice and to make the revised or changed Notice effective for PHI we already have about you as well as any PHI we receive in the future. We will post a copy of the current Notice on this website and will have copies available in the office. The effective date of the current Notice is shown at the top of this page.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us using the contact information below, or with the U.S. Department of Health and Human Services Office for Civil Rights, or with the California Department of Public Health. You will not be retaliated against for filing a complaint.

U.S. Department of Health and Human Services, Office for Civil Rights
200 Independence Avenue SW, Room 509F, HHH Building
Washington, D.C. 20201
www.hhs.gov/ocr/complaints/

Contact

To exercise any of your rights described in this Notice, or to ask questions about our privacy practices, please contact us:

Nina Jung, L.Ac. — Privacy Contact
JungWay Acupuncture & Integrative Wellness
12431 Schaler Dr
Poway, CA 92064
nina@jungway.com
(415) 747-7458