Notice of Privacy Practices

Our commitment

AUTISM 911 HELPLINE, CORP. ("Autism 911," "we," "us," or "our"), a Florida nonprofit corporation, is required by law to maintain the privacy of your Protected Health Information ("PHI"), to provide you with this Notice of our legal duties and privacy practices with respect to PHI, and to notify you following a breach of unsecured PHI.

We are required to abide by the terms of the Notice currently in effect. This Notice applies to all records of care that we create or maintain, whether created by our staff, volunteers, or contractors.

What is Protected Health Information? PHI is information about you, including demographic information, that may identify you and that relates to your past, present, or future physical or mental health or condition, the health care you receive, or the payment for that care.

How we may use and disclose your health information without your authorization

Treatment

We may use and disclose your PHI to provide, coordinate, or manage your care and related services, and to coordinate with other health care providers involved in your care. For example, we may share information with a behavior analyst, physician, therapist, or agency so that they can provide services to you or your child.

Payment

We may use and disclose your PHI to obtain payment or reimbursement for services, including determining eligibility and coverage, obtaining prior authorizations, and submitting claims to Medicaid, an insurer, or another payer.

Health care operations

We may use and disclose your PHI for activities necessary to run our organization and ensure quality care, such as quality assessment and improvement, staff training and evaluation, credentialing, licensing, accreditation, compliance and auditing activities, and general administrative functions.

Other permitted or required uses and disclosures

We may use or disclose your PHI without your written authorization in the following circumstances:

• As required by law — when federal, state, or local law requires the use or disclosure.
• Public health activities — to prevent or control disease, injury, or disability; to report births and deaths; or to report reactions to medications or product defects to the appropriate authorities.
• Victims of abuse, neglect, or domestic violence — we are required by Florida law to report suspected abuse, neglect, or exploitation of a child or a vulnerable adult to the Florida Abuse Hotline.
• Health oversight activities — to agencies conducting audits, investigations, inspections, licensure actions, and other activities necessary to oversee the health care system and government benefit programs.
• Judicial and administrative proceedings — in response to a court or administrative order, or in response to a subpoena, discovery request, or other lawful process when the required assurances have been provided.
• Law enforcement — for limited purposes permitted by law, such as responding to a court order, identifying or locating a suspect or missing person, or reporting a crime on our premises.
• To avert a serious threat to health or safety — when necessary to prevent or lessen a serious and imminent threat to the health or safety of you or another person, to someone able to help prevent the threat.
• Coroners, medical examiners, and funeral directors — as necessary for them to carry out their duties.
• Organ and tissue donation — to organizations that handle procurement, banking, or transplantation.
• Research — when an institutional review board or privacy board has approved a waiver of authorization, or as otherwise permitted by law.
• Workers' compensation — as authorized by and to the extent necessary to comply with workers' compensation laws.
• Specialized government functions — including military and veterans activities, national security and intelligence activities, and protective services.
• Business associates — to vendors who perform functions on our behalf. We require each business associate to sign a written agreement protecting your PHI.
• Individuals involved in your care — to a family member, personal representative, or other person you identify as involved in your care or payment for your care, unless you object. If you are not present or are unable to agree or object, we will use professional judgment to determine whether disclosure is in your best interest.

Uses and disclosures that require your written authorization

Other uses and disclosures of your PHI will be made only with your written authorization. In particular, your written authorization is required for:

• Psychotherapy notes, except in limited circumstances permitted by law.
• Marketing purposes.
• Any sale of your PHI.
• Most uses and disclosures of PHI involving substance use disorder treatment records, which receive additional protection under federal law.

You may revoke an authorization in writing at any time. The revocation will not apply to information that has already been used or disclosed in reliance on the authorization.

Special protections under Florida law

Certain categories of information receive additional protection under Florida law and may require your specific written consent before disclosure, including information relating to HIV/AIDS testing and status, mental health treatment, and substance use disorder treatment. Where state law is more protective than HIPAA, we follow the more protective standard.

Records of a minor are generally accessible to the minor's parent or legal guardian, except where Florida law permits a minor to consent to care on their own or where a court has restricted the parent's or guardian's rights.

Your rights regarding your health information

To exercise any of these rights, submit a written request to our Privacy Officer using the contact information below. Forms are available upon request.

Our responsibilities

• We are required by law to maintain the privacy and security of your PHI.
• We will notify you promptly if a breach occurs that may have compromised the privacy or security of your information.
• We must follow the duties and privacy practices described in this Notice and give you a copy of it.
• We will not use or share your information other than as described here unless you tell us we may in writing. If you tell us we may, you may change your mind at any time by notifying us in writing.

Changes to this Notice

We reserve the right to change this Notice and to make the revised Notice effective for PHI we already have as well as for any information we receive in the future. The current Notice will be posted at our offices and on our website at autism911helpline.org, and will contain its effective date. You may obtain a copy at any time.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us using the contact information below, or directly with the Secretary of the U.S. Department of Health and Human Services:

We will not retaliate against you in any way for filing a complaint. Filing a complaint will not affect the services you receive from us.

Contact — Privacy Officer