Notice of Privacy Practices 

Effective Date: March 19, 2024   INTRODUCTION:

This Notice applies to Enzo Clinical Labs, Inc. (“Enzo”), which no longer provides clinical services. However, as mandated by relevant retention requirements, Enzo maintains protected health information (PHI) from the period when it did provide clinical services. We are required by law to maintain the privacy of protected health information ("PHI"), explain to you our obligation to protect your information and how we will protect it, and notify you of any breach of unsecured protected health information. We are required to follow the terms of this Notice currently in effect. We reserve the right to change the terms of this Notice and our practices. These changes will be effective for all information we maintain about you. If we make changes, it will be available to you on our website or upon request.

USES AND DISCLOSURES:

We are generally able to use or share your PHI without your authorization for the following purposes: Treatment: We may share your information with other professionals who are treating you. Example: If a doctor treating you requires your clinical or anatomic pathology results so that they can effectively treat you for a condition, we may share that information with the doctor.   Payment: We may share your information with health insurance plans or other entities who require your information to pay us for any services we deliver. Example: When we provided clinical services, we shared relevant information with health insurance companies so that they could pay us for any services we performed for you. We may continue to do this if warranted.   Health Care Operations: We may share your information to run our organization, improve our operations and processes, or contact you. Example: To effectively communicate with you, we may need to reference your contact information maintained in our records such as a phone number or address.

We may or must also use your PHI in other ways beyond treatment, payment, and health care operations. Some of these ways could include: To comply with the law. We may share your information to the extent the sharing is needed and limited to the relevant requirements of any law requiring disclosure. For judicial or administrative proceedings. If a court orders us to share information, or we are otherwise required by a judicial authority to share information, we will do so.

For any other purpose, we may not use or share your information without your written authorization. You may revoke your authorization at any time, in writing, and we will honor it unless we have already relied upon your authorization. If we have already honored your authorization, we will honor it going forward. If we have information, such as information about substance use disorder from a qualified provider under relevant federal substance use disorder confidentiality laws, we will adhere to the enhanced protections under those rules. Some states may have more stringent requirements on information related to HIV or sexually transmitted infections, and we will follow those more stringent laws as applicable.

YOUR RIGHTS: You have additional rights to your protected health information, including:

The right to request restrictions on certain uses and disclosures of your information. We are not required to agree to this request except in a situation where your already-restricted information was shared in an emergency. If your already-restricted information was shared in an emergency, you may request that we ask the receiving provider to not further use or disclose your information, and we must agree to such request. The right to receive confidential communications from us, such as at a specific phone number, address, or alternative method. The right to inspect, copy, and amend your information. You may review, duplicate, and request changes to information we have about you. The right to receive a list of individuals (accounting) of the times we have shared your information for the past six years and why, except for disclosures for treatment, payment, or health care operations, or times we shared your information at your request. The right to receive a paper copy of this privacy notice, even if you previously agreed to receive it electronically.

 

COMPLAINTS: You may make a complaint directly to us or to the US Department of Health & Human Services Secretary if you believe your privacy rights have been violated. You will not be retaliated against for filing a complaint. Enzo Clinical Labs, Inc. Privacy Officer 631-755-5500 Ext. 1444 (Compliance Help Line) Email: Compliance@Enzo.com   US Department of Health & Human Services Office for Civil Rights 200 Independence Avenue, S.W. Washington, DC 20201​ 1-877-696-9775 https://www.hhs.gov/hipaa/filing-a-complaint/what-to-expect/index.html