Use and Disclosure of Your Protected Health Information (PHI)

TeleDakter will not use or share your Protected Health Information (PHI) for any purposes not described in this Privacy Notice unless you provide your explicit written consent. Your written authorization is required before we use or disclose your PHI for:

• Marketing communications

• Sale of your PHI

• Fundraising activities

• Sharing with your employer

If TeleDakter needs to use or disclose your PHI for any of these purposes or other non-standard reasons, we will request your permission through a formal HIPAA Authorization to Disclose Protected Health Information form. You may revoke your authorization at any time.

Your Rights Regarding Your PHI

You, or a person authorized by law such as a legal guardian or medical power of attorney, have the following rights related to your PHI:

Right to Access PHI

You can view most of your medical records, including visit and consultation history, directly through the TeleDakter Member Portal.
To access additional information not available online, submit a written request using our PHI Access Request Form. A reasonable fee may apply for printing or mailing records. In limited circumstances, your request may be denied, and if so, we will explain why.

Right to Request an Amendment

If you believe that your PHI is incorrect or incomplete, you may request an amendment. Basic changes can be made through the Member Portal. For other corrections, submit a request using our Amendment Request Form. If we deny your request, you may submit a statement of disagreement for your records.

Right to Request Restrictions

You may ask TeleDakter to limit how we use or disclose your PHI for treatment, payment, or healthcare operations. Submit your request using our Restriction Request Form. While we are not required to agree to every request, we will honor requests to withhold information from your health plan if you pay in full out-of-pocket for services.

Right to Confidential Communications

You can request that we contact you in a specific way (e.g., by email only or at a specific location). To do so, please use our Confidential Communication Request Form. While we are not required to agree, we will make reasonable efforts to accommodate your preferences.

Right to an Accounting of Disclosures

You may request a report of certain disclosures of your PHI made by TeleDakter, excluding those for treatment, payment, operations, and those authorized by you. Your first request in a 12-month period is free. Submit a request using our Disclosure Report Request Form.

Additional Rights

You also have the right to:

• Receive a paper copy of this Privacy Notice upon request

• File a complaint with TeleDakter or the U.S. Department of Health & Human Services if you believe your privacy rights were violated: www.hhs.gov/ocr/privacy/hipaa/complaints

• Contact our Privacy Officer at privacy@teledakter.com or call us at +1 (631) 400-9017 for further assistance

How We Protect Your PHI

The security of your PHI is our top priority. TeleDakter uses advanced administrative, technical, and physical safeguards to protect your health information against unauthorized access, data breaches, and other risks.

Security measures include:

• Encryption at multiple levels: Data is encrypted at the storage (volume) level and within database fields

• Strict access controls: Only a limited number of authorized technical administrators can access data systems

• Regular access audits: We conduct quarterly reviews to verify appropriate access levels for staff

• Ongoing staff training: Our employees are trained annually on HIPAA privacy and security requirements

• Incident response: If a breach involving your unsecured PHI occurs, we will notify you promptly if your privacy may have been compromised

Our security practices comply with applicable HIPAA regulations and are validated through regular audits, including SOC 2 Type II and HITRUST certifications.

Updates to This Notice

TeleDakter may update this Privacy Notice at any time in accordance with applicable laws. If changes are made, we will post the revised version on our website and provide it upon request. All changes will apply to current and future PHI in our possession.