HIPAA Notice of Privacy Practices

Precoh, LLC ("Precoh," "we," or "us") is required by law to provide individuals with notice of its legal duties and privacy practices with respect to your "Protected Health Information" or "PHI" (defined below). This Notice of Privacy Practices ("Notice") describes how we may use and disclose your PHI to carry out treatment, payment, or health care operations, and for other specified purposes that are permitted or required by law.

Our Responsibilities

Precoh and the members of its workforce are committed to protecting the privacy and confidentiality of your personal information, genetic information, and laboratory test results.

Precoh is required by the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"), as amended by the Health Information Technology for Economic and Clinical Health Act of 2009 ("HITECH"), to maintain the privacy and security of your PHI and to provide you with a notice of our legal duties, our privacy practices, and your patient rights.

Whenever we use or disclose your PHI, we are required to abide by the terms of this Notice.

Definition of Protected Health Information

PHI is information about you, including your demographic information, that relates to your physical or mental health condition or health care provided to you. PHI can include your medical history, laboratory results, insurance information, and other health information that is collected, generated, used and communicated by Precoh to produce genetic testing results and bills for our testing services. Examples of PHI include your name, date of birth, medical record number, social security number, insurance beneficiary number, and genetic information.

Uses and Disclosures of Your Protected Health Information

Precoh may use or disclose your PHI for the following purposes:

• We may use or disclose your PHI for purposes of providing your medical treatment. For example, we may use your PHI to perform our testing services and disclose your genetic testing results to your physician and other health care providers involved in your care.
• We may use or disclose your PHI for purposes of billing and collecting payment for our services. For example, we may disclose PHI to your health plan in order to obtain payment for the services provided to you.
• Healthcare Operations. We may use or disclose your PHI to facilitate our healthcare operations. For example, we may review your PHI to monitor the quality and accuracy of our testing services and review the competence and qualifications of our laboratory professionals.
• Persons Involved in Your Care or Payment for Your Care. We may disclose your PHI to persons involved in your care or payment for your case, such as a family member, relative, or close friend, unless you object or ask us not to.
• Notification. We may use or disclose your PHI to notify or assist in notifying a family member, personal representative, or another person responsible for your care regarding your location and general condition.
• Personal Representatives. We may disclose your PHI to your authorized personal representative, such as a lawyer, administrator, executor, or other authorized person responsible for you or your estate.
• Minors' PHI. We may disclose PHI about minors to their parents or legal guardians.
• Communication about Products and Services. We may use and disclose your PHI to contact you about other Precoh products and services which we believe may be of interest to you. We do not disclose your PHI to third parties for marketing purposes without your written authorization.
• Sale of Your Information. Precoh will never sell your PHI to third parties unless you provide written authorization.
• Disclosures to Business Associates. We may disclose your PHI to other companies or individuals, known as "Business Associates," who provide services to us. Our Business Associates are required to protect the privacy and security of your PHI and notify us of any improper disclosure of information.
• As Required by Law. We may use or disclose your PHI if required to do so by any applicable federal, state, or local law.
• Public Health Activities. We may disclose your PHI for public health-related activities, including reporting diseases to authorized public health authorities and public health investigations.
• Health Oversight Activities. We may disclose your PHI to a healthcare oversight agency for activities that are authorized by law, such as audits, investigations, inspections, and licensure activities.
• Research. Under certain circumstances, we may use or disclose your PHI for research purposes within Precoh and with research collaborators outside of Precoh who are under contract and obligated to protect PHI.
• Judicial and Administrative Proceedings. Under certain circumstances, we may disclose your PHI as required to comply with a judicial or administrative order or in response to a subpoena, discovery request, or other lawful process.
• Law Enforcement. We may disclose your PHI to the police or other law enforcement officials as required by law or in compliance with a court order, warrant, subpoena, summons, or other legal process.
• Threats to Health and Safety. We may disclose your PHI to prevent or reduce the risk of a serious and imminent threat to the health and safety of an individual or the general public.
• Victims of Abuse, Neglect, or Violence. If required or authorized by law, we may disclose your PHI to a government agency if we reasonably believe that an individual adult or child is the victim of abuse, neglect, or domestic violence.
• Data Breach Notification. We may use your PHI to provide legally required notices of unauthorized access, acquisition, or disclosure of your PHI.
• De-identification of PHI. We may de-identify your PHI by removing identifying features as determined by law.
• All Other Disclosures. Uses and disclosures of PHI for purposes other than those described above will not be made without a written authorization signed by you or your personal representative.

Your Rights Regarding Your Medical Information

You have the following rights with respect to your PHI. To exercise any of these rights, please contact our Privacy Officer using the contact information provided at the end of this Notice.

• Access to PHI and Test Results. You, or your authorized representative, have the right to inspect and copy your PHI maintained by us. You may retrieve your test results using an online patient portal or by requesting a copy of your information.
• Restrictions on Uses and Disclosures. You have the right to request restrictions on our uses and disclosures of your PHI.
• Alternative Confidential Communications. You may request that we communicate with you about your PHI in a specific means or to an alternative postal mail or email address.
• Correct or Update Your Information. If you believe the PHI we maintain about you contains an error, you may request that we correct or update your information.
• Accounting of Disclosures. You may request a list, or accounting, of certain disclosures of your PHI made by Precoh in the past six years from the date of your request.
• Copy of Notice. You have the right to obtain a paper or electronic copy of this Notice upon request.

Breach Notification

Precoh is required by law to notify you following the discovery that there has been a breach of your unsecured PHI, unless Precoh reasonably determines, after investigating the situation and assessing the risks presented, that there is a low probability that the privacy or security of your PHI has been compromised. You will be notified in a timely manner, no later than sixty (60) days after discovery of the breach, unless state law requires notification sooner.

Changes to Our Notice of Privacy Practices

Precoh reserves the right to amend our privacy practices and the terms of this Notice from time to time, provided such changes are permitted by applicable law. When changes are made, we will promptly post the updated Notice on the Precoh website. Please review this website periodically to ensure that you are aware of any updates.

Compliance with Laws

If more than one law applies to this Notice, such as more stringent state law, we will follow the more stringent law.

Questions and Complaints

If you have any questions or comments about our privacy practices or this Notice, or if you believe that we may have violated your privacy rights, you may submit a complaint to our Privacy Officer. You also may submit a written complaint to the U.S. Department of Health and Human Services ("HHS"). Precoh will not take retaliatory action against you if you choose to file a complaint.

Contact Information

This notice is effective as of October 02, 2022.