HIPAA Notice of Privacy Practices (NPP)

1. Our Duties

We are committed to:

• Protecting your Protected Health Information ("PHI")
• Providing you with this Notice of our privacy practices
• Following the policies outlined in this Notice
• Informing you promptly if any security incident compromises the privacy or security of your PHI.

2. How We May Use and Disclose PHI Without Authorization

• Treatment: to consult with you and your providers.
• Payment: to collect payment for Services.
• Health Care Operations: quality assurance, auditing, training, de-identification.
• Public Health & Safety: disease reporting, adverse events, abuse/neglect, to avert serious threats.

• Health Oversight: inspections, investigations, licensure.
• Judicial/Administrative: court orders, subpoenas (with safeguards).
• Law Enforcement & Specialized Government Functions: as permitted by law.
• Workers’ Compensation: as authorized by law.
• Coroners, Medical Examiners, Funeral Directors, Organ Donation: as permitted by law.
• Research: with IRB / Privacy Board waiver or your authorization and de-identification where possible.
• Limited Data Sets & De-Identification: as HIPAA allows for research and public health purposes.

3. Uses / Disclosures Requiring Your Written Authorization

We need your written permission to use or share your PHI for:

• Marketing communications using PHI.
• Sale of PHI
• Most uses / disclosures of psychotherapy notes.

You may revoke an authorization in writing at any time except to the extent we have already acted on previous authorizations provided by you.

4. Your Rights

• Access: receive paper / electronic copies of your PHI and designated record set.
• Amend: request corrections to your PHI.
• Accounting: get a list of certain disclosures.
• Restrictions: request limits on certain uses / disclosures (we will honor when legally required).
• Confidential Communications: You can request that we contact you by alternate means or at different locations (for example, by calling your work number instead of home).
• Paper Copy: request a copy of this Notice at any time.
• Breach Notice: You have the right to receive notifications if a breach compromises the privacy or security of your PHI, as required by HIPAA and state law.
• Out-of-Pocket Payments: If you pay in full for a service out of your own pocket, you may ask us not to share information about that service with your health plan for payment or healthcare operations purposes, where feasible and not otherwise required by law.

You may submit any requests to the Verus Privacy Officer, by email, or by calling 1 (720) 277 0419

5. If You Have Concerns

Filing a Complaint

You have the right to raise concerns about our privacy practices. You can:

• Contact our Privacy Officer
• File a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights

We respect your rights, and your decision to voice concerns will never result in any negative consequences or changes to your care with us.

6. Breach Notification

If a breach occurs that compromises the privacy or security of your PHI:

• We'll notify you within 60 days as required by HIPAA
• Our notification will explain what happened, what information was involved, and steps you can take to protect yourself
• We'll also notify the Department of Health and Human Services and, if required, media outlets
• We maintain detailed breach logs and conduct risk assessments per HIPAA requirements

7. Changes to This Notice

We may update this Notice from time to time to reflect changes in our practices or legal requirements. Any updates will apply to health information we currently maintain as well as information we collect in the future. You can always find the most current version of this Notice on our website at verusheart.com or request a copy by contacting us directly.

When we make material changes:

• We'll update the "Last Updated" date
• We'll inform you by email
• We'll provide the updated Notice to you at your next service appointment or upon request

7. Contact Us

We're here to help. For questions about this Notice:

Verus Surgical Consultants, Inc.
Henderson, NV, 89052

Phone: 1 720 277-0419

For privacy specific requests, you may emails us here.

For any complaints, you may emails us here.