Privacy Policy

COMFORT HOME CARE, LLC. NOTICE OF PRIVACY PRACTICES – Effective as of 09/01/2013

This Notice Describes How Medical Information About You May Be Used And Disclosed And How You Can Get Access To This
Information. Please Review It Carefully.

The privacy practices described in this notice applies to Comfort Home Care (“Company”). The Company is required by the
federal law known as the Health Insurance Portability and Accountability Act (referred to as the HIPAA Privacy Rule) to
take reasonable steps to ensure the privacy of your personally identifiable health information (Protected Health
Information) and to inform you about:

  • the Company’s uses and disclosures of Protected Health Information;
  • your privacy rights with respect to your Protected Health Information;
  • your right to file a complaint with the Company and to the Secretary of the U.S. Department of Health and Human
    Services; and
    The person or office to contact for further information about the Company’s privacy practices.

USES AND DISCLOSURES TO CARRY OUT TREATMENT, PAYMENT AND HEALTH CARE OPERATIONS

Except as otherwise provided in this notice or otherwise permitted under the HIPAA Privacy Rule, uses and disclosures of
Protected Health Information will be made only with your written authorization subject to your right to revoke such
authorization. If you provide the Company authorization to use or disclose PHI about you, you may revoke that
permission, in writing, at any time by sending a notice of revocation to the Privacy Officer at the address provided
below. If you revoke your permission, the Company will no longer use or disclose PHI about you for the reasons covered
by your written authorization. The Company will not be able to reverse any disclosures made prior to your revocation.

The Company may contact you to provide appointment reminders or information about treatment
alternatives or other health-related benefits and services that may be of interest to you.

Note: Special rules may apply with respect to the use and disclosure of genetic and HIV testing information. You may
contact the Privacy Officer for more information about these rules.

The HIPAA Privacy Rule permits the Company and its respective Business Associates to use and disclose Protected Health
Information without your consent, authorization, or opportunity to agree or object, to carry out Treatment, Payment and
Health Care Operations.

Treatment is the provision, coordination or management of health care and related services. For example, the Company may
disclose your Protected Health Information to your primary care provider to assist in the coordination of your care.
Payment includes but is not limited to actions to make coverage determinations and payment (including Medicare/insurance
eligibility and coverage, and billing). For example, the Company may submit its charges for payment to your insurance
carrier or Medicare for payment.
Health Care Operations include but are not limited to quality assessment and improvement, reviewing competence or
qualifications of health care professionals, and working with vendors to coordinate your care. For example, the Company
may share your medical records with peer review committees to assess and improve the level of care you are receiving.

USES AND DISCLOSURES THAT REQUIRE THAT YOU BE GIVEN AN OPPORTUNITY TO AGREE OR DISAGREE PRIOR TO THE USE OR RELEASE

Disclosure of your Protected Health Information to family members, other relatives and your close personal friends is
allowed if:

the information is directly relevant to the family or friend’s involvement with your care or payment for that care; and
you have either agreed to the disclosure or have been given an opportunity to object and have not objected.

OTHER USES AND DISCLOSURES FOR WHICH CONSENT, AUTHORIZATION OR OPPORTUNITY TO OBJECT IS NOT REQUIRED

Use and disclosure of your Protected Health Information is allowed without your consent, authorization or request under
the following circumstances:

  • When required by law.
  • When permitted for purposes of public health activities, including if you have been exposed to a communicable disease or
    are at risk of spreading a disease or condition, if authorized by law.
  • When authorized by law to report information about certain abuse, neglect or domestic violence to public authorities.
  • For public health oversight activities authorized by law.
  • For certain judicial or administrative proceedings.
  • For certain law enforcement purposes.
  • To a coroner or medical examiner for the purpose of identifying a deceased person, determining a cause of death or other
    duties as authorized by law; and funeral directors, consistent with applicable law.
  • The Company may use or disclose Protected Health Information for research, subject to conditions.
  • For the purpose of facilitating organ, eye or tissue donation or transplantation.
  • When consistent with applicable law to prevent or lessen a serious and imminent threat to the health or safety of a
    person or the public.
  • To the extent necessary to comply with workers’ compensation or other similar programs established by law.

REQUIRED USES AND DISCLOSURES

Upon your request, the Company is required to give you access to certain Protected Health Information in order to
inspect and copy it. Under certain circumstances, however, the Company may deny your request.

Use and disclosure of your Protected Health Information may be required by the Secretary of the Department of Health and
Human Services to investigate or determine the Company’s compliance with the privacy regulations.

RIGHTS OF INDIVIDUALS

In the event any of the following provisions require you to submit a written request to exercise such right, you must
submit such request to the Privacy Officer, 147 Pelham Street Methuen, MA 01844

RIGHT TO REQUEST RESTRICTIONS AND CONFIDENTIAL COMMUNICATIONS OF Protected Health Information

You may request that the Company restrict uses and disclosures of your Protected Health Information to carry out
Treatment, Payment or Health Care Operations, or to restrict uses and disclosures to persons identified by you who are
involved in your care or payment for your care. The Company is not required to agree to your request, however, unless
otherwise required by law, the Company must permit a request for a restriction on disclosures to another health plan for
purposes of payment or health care operations where the PHI pertains solely to a health care item or service for which
the health care provider involved has been paid out of pocket in full.

The Company will accommodate reasonable requests to receive communications of Protected Health Information by
alternative means or at alternative locations.

You or your personal representative will be required to complete a form to request restrictions on uses and disclosures
of your Protected Health Information or to request confidential communications of Protected Health Information.

RIGHT TO AMEND Protected Health Information

Your clinical record established by our home health agency is the property of our agency, but you have the right to
access your record at any time. You must submit your request in writing. A summary of your health information will be
provided and there may be a fee for copying and mailing and the supplies used to send you the information.

We may deny your request to review or copy you clinical record in certain limited circumstances. If you are denied
access to your record you may request that the denial be reconsidered.

You have the right to request the Company amend your Protected Health Information or a record about you in a Designated
Record Set for as long as the Protected Health Information is maintained in the Designated Record Set.

The Company has 60 days after the request is made to act on the request. A single 30-day extension is allowed. If the
request is denied in whole or part, the Company must provide you with a written denial that explains the basis for the
denial. You or your personal representative may then submit a written statement disagreeing with the denial and have
that statement included with any future disclosures of your Protected Health Information.

You or your personal representative will be required to complete a form to request amendment of the Protected Health
Information in your Designated Record Set. Any request for an amendment must be in writing and provide a reason to
support a requested amendment.

RIGHT TO NOTIFICATION OF BREACH OF UNSECURED Protected Health Information

In the event that a breach occurs with regard to your Protected Health Information, you have the right to be notified of
the breach.

A NOTE ABOUT PERSONAL REPRESENTATIVES

You may exercise your rights through a personal representative. Your personal representative will be required to produce
evidence of his/her authority to act on your behalf before that person will be given access to your Protected Health
Information or allowed to take any action for you.

The Company retains discretion to deny access to your Protected Health Information to a personal representative to
provide protection to those vulnerable people who depend on others to exercise their rights under these rules and who
may be subject to abuse or neglect.

THE COMPANY’S DUTIES

The Company is required by law to maintain the privacy of Protected Health Information and to provide patients with
notice of its legal duties and privacy practices. This notice is effective beginning 09/01/2013 and the Company is
required to comply with the terms of this notice. However, the Company reserves the right to change its privacy
practices and to apply the changes to any Protected Health Information received or maintained by the Company prior to
that date.

If a privacy practice is changed, a revised version of this notice will be posted in our agency’s office with the
effective date. In the event the revised notice is mailed to you, it shall be provided by first class mail to your last
known address. Any revised version of this notice will be distributed/published within 60 days of the effective date of
any material change to the uses or disclosures, the individual’s rights, the duties of the Company or other privacy
practices stated in this notice.

MINIMUM NECESSARY STANDARD

When using or disclosing Protected Health Information or when requesting Protected Health Information from another
Covered Entity, the Company will make reasonable efforts not to use, disclose or request more than the minimum amount of
Protected Health Information necessary to accomplish the intended purpose of the use, disclosure or request, taking into
consideration practical and technological limitations. However, the minimum necessary standard will not apply in the
following situations:

  • disclosures to or requests by a health care provider for treatment;
  • uses or disclosures made to the individual or pursuant to your authorization;
  • disclosures for compliance made to the Secretary of the U.S. Department of Health and Human Services;
  • uses or disclosures that are required by law; and
  • uses or disclosures that are required for the Company’s compliance with legal regulations.

YOUR RIGHT TO FILE A COMPLAINT WITH THE COMPANY OR THE HHS SECRETARY

If you believe that your privacy rights have been violated, you may complain to the Company in care of the following
officer:

Comfort Home Care
ATTN: Privacy Officer
147 Pelham Street
Methuen, MA 01844

or you may call (978) 685-4700.You may file a complaint with the Secretary of the U.S. Department of Health and Human
Services, Hubert H. Humphrey Building, 200 Independence Avenue S.W., Washington, D.C. 20201.

The Company will not retaliate against you for filing a complaint.

ADDITIONAL INFORMATION

If you have any questions regarding this notice or the subjects addressed in it, you may contact the following officer:
Privacy Officer, 147 Pelham Street Methuen, MA 01844, or you may call (978) 685-4700.

The HIPAA Privacy Rule is set out at 45 Code of Federal Regulations Parts 160 and 164. These regulations and additional
information about the HIPAA Privacy Rule are available at http://www.hhs.gov/ocr/hipaa/.