Notice of Privacy Practices

1. Our Commitment

Parsons at Home LLC (“Parsons,” “we”) is a covered entity under the Texas Medical Records Privacy Act, Tex. Health & Safety Code Chapter 181, and Texas law requires us to protect the privacy of your protected health information (“PHI”). We are required to maintain the privacy of your PHI, to give you this Notice of our legal duties and privacy practices, to follow the terms of the Notice currently in effect, and to notify you following a breach of your unsecured PHI. We also apply federal HIPAA privacy and security standards to your information as our operating standard.

2. How We May Use and Disclose Your Health Information

Service delivery. We use PHI to provide the service — for example, to place check-in calls, to coordinate with your physicians, pharmacies and home health providers, to keep your medication list accurate, and to note and share concerns with the contacts you designate.

Payment. We use PHI as needed to bill and collect the membership fee from whoever holds the account — which may be a family member, or you. The service that handles billing does not receive your health information; it identifies you only by a code that cannot be traced back to you from that system.

Operations. We use PHI for our operations — for example, to review the quality of our check-in calls and coordination, to train our staff, and to audit who has accessed your information.

To the family members and contacts you designate — and only as far as you have said. We share your information with the people you name, and for each of those people, only the specific items you have authorized. If you have not authorized anything, we share nothing. You may change or withdraw an authorization at any time; we record the change, and we keep the record of what was authorized before, so we can always tell you what a given person could see on a given date.

With your authorization. Other uses and disclosures not described in this Notice are made only with your written authorization. We do not sell your PHI, we do not use or disclose it for marketing, and we do not accept psychotherapy notes; any of these would require your separate written authorization. You may revoke an authorization at any time by writing to the Privacy Officer, except to the extent we have already acted in reliance on it.

As required by law and for safety. We may use or disclose PHI without your authorization where the law requires or permits it, including: to report suspected abuse, neglect or exploitation of an elderly person or person with a disability to the Texas Department of Family and Protective Services or other appropriate agency, as Texas law requires; to prevent or lessen a serious and imminent threat to the health or safety of you or others; for public health activities; to health oversight agencies; in response to a court order, subpoena or other lawful process; to law enforcement as the law allows; to coroners, medical examiners and funeral directors; and when required by the U.S. Department of Health and Human Services to investigate our compliance. In an emergency, or if you cannot agree, we may share information relevant to your care with a family member involved in it, if we believe that is in your best interest.

Information that leaves our protection. Information we disclose as permitted by this Notice — for example, to a family member you have authorized — may be redisclosed by the person who receives it and may then no longer be protected by federal or Texas privacy law.

Reproductive health care information. We will not use or disclose your PHI to investigate, or to impose liability on, any person for the mere act of seeking, obtaining, providing or facilitating reproductive health care that is lawful under the circumstances in which it was provided — for example, we will not give a law enforcement agency records of a pharmacy refill we coordinated so that it can investigate whether that care was obtained. Before we disclose PHI potentially related to reproductive health care for health oversight, judicial or administrative proceedings, law enforcement, or to coroners or medical examiners, we must first obtain a signed attestation from the person requesting it that the information will not be used for a prohibited purpose — for example, a subpoena seeking your medication records must be accompanied by that attestation.

Substance use disorder treatment records. We do not accept records protected by federal law governing substance use disorder treatment programs (42 CFR Part 2). If any such record is received, it will not be used or disclosed in any civil, criminal, administrative or legislative proceeding against you except with your specific written consent or a court order issued after notice and an opportunity to be heard, as that law requires.

Service providers. We use technology providers — for example to host our systems and to carry our email — and they handle your information under written agreements that require them to protect it. Email sent to an ordinary email address outside our systems travels over the public internet and is outside those protections, so we send health information by email only if you have asked us to.

3. Your Rights

• Access, amendment, and an accounting of certain disclosures of your PHI.
• Request restrictions on how we use or share your PHI (we are not required to agree, but if we agree we will honor the restriction except in an emergency), and request that we contact you by a different method or at a different address.
• Receive a paper copy of this Notice and revoke a prior authorization in writing.
• Ask us who is currently authorized to see your information, and what each of them may see.

How to exercise them. Write to the Privacy Officer at the address below, or call. We will respond to a request to see or copy your records within 30 days, and where you ask in writing for an electronic copy of records we keep electronically, within 15 business days as Texas law requires; to a request to amend your records within 60 days; and to a request for an accounting of disclosures within 60 days. If we cannot meet a 30- or 60-day deadline, we will tell you in writing before it passes why, and the date we will respond, which will be no more than 30 days later. We may extend each request only once. We handle these requests ourselves; our technology providers do not hold your records in a form they can search or release, and requests made to them will be referred back to us. Instructions for requesting your records and for filing a complaint are also posted on our website.

4. Texas HB 300 — Additional Provisions

Under Texas law: your PHI is subject to electronic disclosure — we keep and transmit it electronically. Except for disclosures to another covered entity for treatment, payment or health care operations, or as otherwise authorized or required by law, we will not disclose your PHI electronically without your separate authorization, which you give, by person and by item, in the Consent Packet. We do not sell your PHI. Our workforce completes privacy training. If a breach of your information occurs, we will notify you without unreasonable delay and no later than 60 days after we determine it occurred, and where 250 or more Texas residents are affected we will notify the Texas Attorney General no later than 30 days after that determination. You may also file a complaint with the Texas Attorney General’s office.

5. Our Duties, Changes, and Complaints

We protect your PHI and will notify you following a breach of unsecured PHI. We reserve the right to change this Notice and to make the new terms effective for all PHI we maintain, including PHI we already hold. If we make a material change, we will post the revised Notice prominently on our website, make it available through a link in the Parsons application that opens the full Notice, and provide a paper copy on request, before the change takes effect. You may complain to us or to the U.S. Department of Health and Human Services, Office for Civil Rights. We will not retaliate against you for filing a complaint. To complain to us, contact the Privacy Officer below; we will acknowledge your complaint and tell you the outcome.