HIPAA Notice of Privacy Practices

1. Our Legal Duty

Med Inc is required by federal law (the Health Insurance Portability and Accountability Act, "HIPAA") and Florida state law to:

• Maintain the privacy of your protected health information (PHI).
• Provide you with this Notice of our legal duties and privacy practices.
• Notify you of any breach of unsecured PHI within 60 days.
• Follow the privacy practices described in this Notice.

2. How We May Use and Disclose Your PHI

For Treatment

We use your PHI to coordinate and deliver home health services. For example, your assigned caregiver reviews your care plan, medication list, and physician orders before each visit.

For Payment

We use your PHI to bill Medicaid, Medicare, your insurance, or you directly for services rendered. This includes verifying eligibility, obtaining prior authorization, and submitting claims.

For Health Care Operations

We use your PHI for quality improvement, staff training, license compliance, accreditation surveys, and internal audits. PHI used for these purposes is limited to the minimum necessary.

For Legal & Public Health Purposes

• To comply with court orders, subpoenas, or warrants.
• To report suspected abuse, neglect, or domestic violence to Florida DCF as required by law.
• To report communicable diseases to the Florida Department of Health.
• To comply with FDA reporting on adverse events.
• To comply with workers' compensation laws.
• For inspections and audits by AHCA and CMS.

To Family Members & Caregivers

With your verbal or written agreement, we may share PHI with family members or others involved in your care. You may revoke this permission at any time.

Other Uses Require Your Authorization

Any use or disclosure not described above will be made only with your written authorization, which you may revoke at any time (except where we have already acted in reliance on it). This includes:

• Marketing communications.
• Sale of PHI (we do not and will not sell PHI).
• Most uses of psychotherapy notes.

3. Your Rights Regarding Your PHI

Right	How to exercise it
Right to inspect & copy your PHI	Submit a written request to our Privacy Officer. We will respond within 30 days. A reasonable fee may apply.
Right to amend incorrect PHI	Submit a written request explaining the error. We may deny if the record is accurate.
Right to an accounting of disclosures (last 6 years)	Submit a written request. The first request per year is free.
Right to request restrictions on certain uses	Submit a written request. We are not required to agree, except for disclosures to insurers when you pay in full out of pocket.
Right to confidential communications (alternate phone, address)	Submit a written request specifying the alternate method.
Right to a paper copy of this Notice	Ask any Med Inc staff member; we will print one for you.
Right to file a complaint	Contact our Privacy Officer, OR file with the U.S. Department of Health & Human Services Office for Civil Rights at hhs.gov/ocr/complaints. We will not retaliate against you.

4. Breach Notification

If a breach of your unsecured PHI occurs, we will notify you in writing within 60 days of discovery, as required by HIPAA and Florida Statute § 501.171.

5. Audit Trail

Every access to your electronic PHI is logged in our HIPAA-compliant audit system, including who viewed it, when, and from what location. You may request a copy of this access log.

6. Changes to This Notice

We may revise this Notice. The revised Notice will apply to all PHI we maintain. The effective date is shown at the top of this page. We will post the current Notice on our website and at our office.

7. Contact Our Privacy Officer

For questions, complaints, or to exercise your rights:
Med Inc — HIPAA Privacy Officer
Email: privacy@medhha.com
Naples, Florida

Notice effective date: April 1, 2026. Med Inc complies with applicable Federal civil rights laws and does not discriminate on the basis of race, color, national origin, age, disability, sex, or sexual orientation.