Patient Privacy

Breg Privacy Policies

HIPAA Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Breg, Inc. ("Breg") is required by law to maintain the privacy of your Protected Health Information (PHI) and to provide you with a notice of our legal duties and privacy practices with respect to PHI. This Notice of Privacy Practices describes how we may use and disclose your PHI to carry out treatment, payment or health care operations and for other specified purposes that are permitted or required by law. The Notice also describes your rights with respect to your PHI. "PHI" is information about you, including basic demographic information, that may identify you and that relates to your past, present or future physical or mental health or condition and related health care services.

Breg is required to follow the terms of this Notice of Privacy Practices. We will not use or disclose your PHI without your written permission, except as described in this Notice. We reserve the right to change our practices and this Notice and to make the new Notice effective for all PHI we maintain. Upon your request, we will provide you with a revised Notice.

EXAMPLES OF HOW WE MAY USE AND DISCLOSE PHI ABOUT YOU

The following categories describe different ways that we use and disclose your PHI.

Treatment: Breg may use your health information to provide and coordinate the treatment, products and services you receive. For example, information obtained by a Breg representative will be recorded in your record and used to determine suitability for the product, fitting and to provide instruction regarding appropriate use of the product.

Payment: Breg may use and disclose your health information to others for purposes of receiving payment for treatment and services that you receive. For example, we will submit a claim to you or your health plan/insurer that includes information that identifies you, as well as your diagnosis, and product supplied.

Health Care Operations: Breg may use information in your health record for operational purposes. For example, we may use your information to assess the care and outcomes in your case and others like it. This information will then be used in an effort to continually improve the quality and effectiveness of the products and services we provide.

To Communicate with Individuals Involved in Your Care Or Payment for Your Care: Breg may disclose to a family member, other relative, close personal friend or any other person you identify, PHI directly relevant to that person's involvement in your care or payment related to your care.

U.S. Food and Drug Administration (FDA): As required by federal law, Breg may disclose PHI to the FDA to report adverse events regarding our devices, device defects, or post marketing surveillance information to enable product recalls, repairs, or replacement.

Worker's Compensation: We may disclose your PHI to the extent authorized by and to the extent necessary to comply with laws relating to Worker's Compensation or other similar programs established by law.

Fundraising: We may contact you as part of a fundraising effort.

Public Health: As required by law, we may disclose your PHI to public health or legal authorities charged with preventing or controlling disease, injury, or disability. Law Enforcement: We may disclose your PHI for law enforcement purposes as required by law or in response to a valid subpoena or court order.

As Required by Law: We will disclose your PHI when required to do so by federal, state, or local law.

Health Oversight Activities: We may disclose your PHI to an oversight agency for activities authorized by law. These oversight activities include audits, investigations, and inspections, as necessary for licensure and for the government to monitor the health care system, government programs, and compliance with civil rights laws.

Judicial and Administrative Proceedings: If you are involved in a lawsuit or a dispute, we may disclose your PHI in response to a court or administrative order. We may also disclose health information about you in response to a subpoena, discovery request, or other lawful process by someone else involved in the dispute, but only if efforts have been made, either by us or the requesting party, to tell you about the request or to obtain an order protecting the information requested.

Research: We may disclose your PHI to researchers when their research has been approved by an institutional review board or privacy board that has reviewed the research proposal and established protocols to ensure the privacy of your information.

Coroners, Medical Examiners, and Funeral Directors: We may release your PHI to a coroner or medical examiner. This may be necessary, for example, to identify a deceased person or determine the cause of death. We may also disclose PHI to funeral directors consistent with applicable law to enable them to carry out their duties.

Organ or Tissue Procurement Organizations: Consistent with applicable law, we may disclose your PHI to organ procurement organizations or other entities engaged in the procurement, banking, or transplantation of organs for the purpose of tissue donation and transplant.

Notification: We may use or disclose your PHI to notify or assist in notifying a family member, personal representative, or another person responsible for your care, regarding your location and general condition.

Correctional Institution: If you are or become an inmate of a correctional institution, we may disclose to the institution or its agents PHI necessary for your health and the health and safety of other individuals.

To Avert a Serious Threat to Health or Safety: We may use and disclose your PHI when necessary to prevent a serious threat to your health and safety or the health and safety of the public or another person.

Military and Veterans: If you are a member of the armed forces, we may release PHI about you as required by military command authorities. We may also release PHI about foreign military personnel to the appropriate foreign military authority.

National Security and Intelligence Activities: We may release PHI about you to authorized federal officials for intelligence, counterintelligence, and other national security activities authorized by law.

Protective Services for the President and Others: We may disclose PHI about you to authorized federal officials so they may provide protection to the President, other authorized persons or foreign heads of state, or conduct special investigations.

Regulatory Compliance: Federal law makes provision for your medical information to be released to an appropriate health oversight agency, public health authority or attorney, provided that a work force member or business associate believes in good faith that we have engaged in unlawful conduct or have otherwise violated professional or clinical standards and are potentially endangering one or more patients, workers or the public.

Victims of Abuse or Neglect: We may disclose PHI about you to a government authority if we reasonably believe you are a victim of abuse or neglect. We will only disclose this type of information to the extent required by law, if you agree to the disclosure, or if the disclosure is allowed by law and we believe it is necessary to prevent serious harm to you or someone else.

OTHER USES AND DISCLOSURES OF PHI

Breg will obtain your written authorization before using or disclosing your PHI for purposes other than those provided for above (or as otherwise permitted or required by law). You may revoke this authorization in writing at any time. Upon receipt of the written revocation, we will stop using or disclosing your PHI, except to the extent that we have already taken action in reliance on the authorization.

YOUR HEALTH INFORMATION RIGHTS

You have the following rights with respect to your PHI:

• Obtain a paper copy of the Notice of Privacy Practices upon request.
• Request a restriction on our use and disclosure of your information for treatment, payment, health care operations and to others involved in your treatment or payment for treatment. However, we are not required to agree to your request.
• Inspect and obtain a copy of your information. This right is subject to certain specific exceptions, and you may be charged a reasonable fee for any copies of your records.
• Amend your medical information. If you feel that PHI we have about you is incomplete or incorrect, you may request that we amend the information that we maintain.
• Receive an accounting of the disclosures of your medical information made by Breg in the six years prior to your request, except for disclosures for treatment, payment or operational purposes, and for certain other specific disclosure types.
• Request communications of your information by alternative means or at alternative locations. You may request that we contact you only in writing or at a different residence or post office box.

To request any of the foregoing, you must submit your request in writing to phi@Breg.com. Your request must state how or when you would like to be contacted.

FOR MORE INFORMATION OR TO REPORT A PROBLEM

If you have questions or would like additional information about Breg's privacy practices, you may contact the Privacy Officer at phi@Breg.com. If you believe your privacy rights have been violated, you can file a complaint with the Privacy Officer or with the United States Secretary of Health and Human Services. There will be no retaliation for filing a complaint.