Notice of Privacy Practices

A. Our Commitment to Your Privacy

Precision MSK ("Precision") is dedicated to maintaining the privacy of your health information. In conducting our business, we will create, receive, or retain records regarding your treatment and the services we provide. We are required by law to maintain the confidentiality of protected health information that identifies you ("PHI"). We also are required by law to provide you with this Notice of our legal duties and the privacy practices that we maintain concerning PHI. We realize that these laws are complicated, but we must provide you with the following information:

• How we may use and disclose PHI;
• Your privacy rights in PHI; and
• Our obligations concerning the use and disclosure of PHI.

The terms of this Notice apply to all records containing PHI that are created, received, or retained by Precision. Precision is required to abide by the terms of this Notice currently in effect. We reserve the right to revise or amend this Notice. Any revision or amendment to this Notice will be effective for all of your records that Precision has created or maintained in the past, and for any records that we may create or maintain in the future. We will make any revised or amended notice available electronically on our website and by e-mail, if you have agreed to receive electronic communications.

B. Questions About This Notice

If you have questions about this Notice, please contact us:

C. How We May Use and Disclose Your PHI

1. Treatment

Precision may use your PHI to treat you. For example, our physicians may ask about your health history in order to treat you. The people who work at Precision, including, but not limited to, our physicians may use or disclose your PHI in order to treat you or to assist others in your treatment.

2. Payment

Precision may use and disclose PHI in order to bill and collect payment for the services and items you may receive from us. For example, we may contact your health insurer to inquire whether you are eligible for benefits (and for what range of benefits), and we may provide your insurer with details regarding your treatment to determine if your insurer will cover or pay for treatment.

3. Health Care Operations

Precision may use and disclose PHI to operate our business. As examples of the ways in which we may use and disclose your information for our operations, Precision may use your PHI to evaluate the quality of care you received from us, to conduct training of medical professionals and non-professionals, or to conduct cost-management and business planning activities for Precision, among other activities. Precision may also disclose PHI to another health care provider or for the health care operations activities of that entity if it also has or had a relationship with you and the PHI pertains to that relationship.

4. Appointment Reminders

Precision may use and disclose PHI to contact you and remind you of an appointment.

5. Treatment Options and Health-Related Benefits and Services

Precision may use and disclose PHI to inform you of potential treatment options or alternatives. We may use and disclose PHI to inform you of health-related benefits or services that may be of interest to you. If you do not want Precision to contact you regarding these services, you may opt out by notifying privacy@precisionorthomd.com or calling 800-585-0375.

6. Disclosures Required by Law

Precision will use and disclose PHI when we are required to do so by federal, state or local law.

7. Psychotherapy Notes

Psychotherapy notes have additional protections and, in certain cases, are subject to additional requirements and restrictions related to disclosures to you and third parties. Precision does not create or maintain psychotherapy notes.

D. Your Right to Restrict Use or Disclosure of PHI

You have the right and choice to agree to, or prohibit or restrict the use or disclosure of PHI in certain situations. Specifically, Precision may share PHI with a person who is involved in your medical care or payment for your care, such as your family or a close friend. We also may notify family about your location or general condition or disclose such information to an entity assisting in a disaster relief effort. If you are not able to tell us your preference, we may go ahead and share your information if we believe it is in your best interest. We may also share your information when needed to lessen a serious and imminent threat to health or safety. Additionally, we may disclose information about you to a personal representative. If a person has the authority by law to make health care decisions for you, we will generally treat that personal representative the same way we would treat you with respect to your health information.

E. Use and Disclosure of Your PHI in Certain Circumstances

We may use or disclose PHI in the following situations (subject to F and G below):

1. Public Health and Safety Issues

Precision may share PHI about you for certain situations such as:

• Preventing disease;
• Helping with product recalls;
• Reporting adverse reactions to medications;
• Reporting suspected abuse, neglect or domestic violence; and
• Preventing or reducing a serious threat to anyone's health or safety.

2. Health Oversight Activities

Precision may disclose your PHI to a health oversight agency for activities authorized by law. Oversight activities can include, for example, investigations, inspections, audits, surveys, licensure and disciplinary actions; civil, administrative and criminal procedures or actions; or other activities necessary for the government to monitor government programs, compliance with civil rights laws and the health care system in general.

3. Compliance with Law, Lawsuits and Similar Proceedings

Precision will share information about you if state or federal laws require it, including with the Department of Health and Human Services if it wants to see that Precision is complying with federal privacy law. Precision may use and disclose PHI in response to a court or administrative order, if you are involved in a lawsuit or similar proceeding. Precision also may disclose PHI in response to a discovery request, subpoena or other lawful process by another party involved in the dispute, but only if we have made an effort to inform you of the request or to obtain an order protecting the information the party has requested.

4. Law Enforcement

Precision may release PHI if asked to do so by a law enforcement official:

• Regarding a crime victim in certain situations, if we are unable to obtain the person's agreement;
• Concerning a death we believe has resulted from criminal conduct;
• Regarding criminal conduct at our offices;
• In response to a warrant, summons, court order, subpoena or similar legal process;
• To identify/locate a suspect, material witness, fugitive or missing person; and
• In an emergency, to report a crime (including the location or victim(s) of the crime; or the description, identity or location of the perpetrator).

5. Organ Procurement, Coroners, Medical Examiners, and Funeral Directors

Precision may release PHI to organ procurement organizations, a coroner or medical examiner. We also may release PHI to funeral directors as necessary for their duties.

6. Research

Under certain circumstances, we may use and disclose PHI for research. Before we use or disclose PHI for research, the project will go through a special approval process. Even without special approval, we may permit researchers to look at records to help them identify patients who may be included in their research project or for other similar purposes, as long as they do not remove or take a copy of the PHI.

7. Serious Threats to Health or Safety

Precision may use and disclose PHI when necessary to reduce or prevent a serious threat to your health and safety or the health and safety of another individual or the public. Under these circumstances, we will only make disclosures to a person or organization able to help prevent the threat.

8. National Security

Precision may disclose PHI to federal officials for intelligence and national security activities authorized by law. We also may disclose PHI to federal officials in order to protect the president, other officials or foreign heads of state, or to conduct investigations.

9. Workers' Compensation

Precision may disclose PHI for workers' compensation claims.

10. Military and Veterans

If you are a member of the armed forces, we may release medical information about you as required by military command authorities. We may also release medical information about foreign military personnel to the appropriate foreign military authority.

F. Prohibited Uses of Your PHI

Except pursuant to and in compliance with an appropriate authorization and subject to some limited exceptions, Precision may not receive remuneration in exchange for PHI and cannot sell your PHI.

G. Potential for Redisclosure

There is the potential for PHI disclosed pursuant to the HIPAA Privacy Rule to be subject to redisclosure and no longer protected by the HIPAA Privacy Rule.

H. Substance Use Disorder Treatment Records

Substance use disorder treatment records received from programs subject to 42 C.F.R. Part 2, or testimony relaying the content of such records, shall not be used or disclosed in civil, criminal, administrative, or legislative proceedings against the individual unless based on written consent, or a court order after notice and an opportunity to be heard is provided to the individual or the holder of the record as provided in 42 CFR Part 2. A court order authorizing use or disclosure must be accompanied by a subpoena or other legal requirement compelling disclosure before Precision would use or disclose the record.

Precision will only use or disclose substance use disorder treatment records as set forth in this Notice in accordance with 42 C.F.R. Part 2, including that we will secure your written consent where required. You may provide a single consent for all future uses or disclosures of substance use disorder records for treatment, payment, and health care operations purposes. Precision will not use or disclose substance use disorder records in a manner which is not described in this Notice without your prior consent (unless otherwise permitted or required by applicable law), which you may revoke at any time by providing notice in writing to privacy@precisionorthomd.com.

I. Your Rights Regarding Your PHI

You have the following rights regarding the PHI that we maintain about you:

1. Confidential Communications

You have the right to request that Precision communicate with you about your health and related issues in a particular manner or at a certain location. For instance, you may ask that we contact you at home, rather than work. In order to request a type of confidential communication, you must make a written request to privacy@precisionorthomd.com specifying the requested method of contact, or the location where you wish to be contacted. Precision will accommodate reasonable requests. You do not need to give a reason for your request.

2. Requesting Restrictions

You have the right to request a restriction or limitation on the PHI we use or disclose for treatment, payment, or health care operations. You also have the right to request a limit on the PHI we disclose to someone involved in your care or the payment for your care, like a family member or friend.

To request a restriction, you must make your request in writing to Precision. We are not required to agree to your request unless you are asking us to restrict the use and disclosure of PHI to a health plan for payment or health care operation purposes and such information you wish to restrict pertains solely to a health care item or service for which you have paid us "out-of-pocket" in full. If we agree, we will comply with your request unless the information is needed to provide you with emergency treatment.

If you paid out-of-pocket in full for a specific item or service, you have the right to ask that PHI with respect to that item or service not be disclosed to a health plan for purposes of payment or health care operations, and we will honor that request.

3. Inspection and Copies

You have the right to inspect and obtain a copy of the PHI that may be used to make decisions about you, including patient medical records and billing records, with limited exceptions. You must submit your request in writing to privacy@precisionorthomd.com. Precision may charge a fee for the costs of copying, mailing, labor and supplies associated with your request. Precision may deny your request to inspect and/or copy in certain limited circumstances; however, you may request a review of our denial. If PHI is maintained in an electronic format (known as an electronic medical record or an electronic health record), you have the right to request that an electronic copy of your record be given to you or transmitted to another individual or entity. We may charge you a reasonable, cost-based fee for the labor associated with transmitting the electronic medical record.

4. Amendment

If you feel that PHI we have is incorrect or incomplete, you may ask us to amend the information. You have the right to request an amendment for as long as the information is kept by or for Precision. To request an amendment, you must make your request, in writing, to the Privacy Officer at privacy@precisionorthomd.com.

5. Accounting of Disclosures

You have the right to request a list of certain disclosures we made of PHI for six years prior to the date of your request. To request an accounting of disclosures, you must make your request, in writing, to the Privacy Officer at privacy@precisionorthomd.com.

6. Right to List of Disclosures by Intermediaries

You have the right to request a list of disclosures of substance use disorder treatment records by certain intermediaries. Intermediaries are persons other than those persons regulated by HIPAA, who have received records under a general designation in a consent which you have signed and who has a treating provider relationship with you. To request this list of disclosures, you must submit your request in writing to the Privacy Officer at privacy@precisionorthomd.com. Your request must state a time period that may not be longer than three years from the date of service. The first list you request within a 12-month period will be free. For additional lists, we may charge you for the costs of providing the list. We will notify you of the cost involved and you may choose to withdraw or modify your request at that time before any costs are incurred.

7. Right to Get Notice of a Breach

You have the right to be notified upon a breach of any of your PHI which is deemed to be unsecure in accordance with applicable law.

8. Right to a Paper Copy of This Notice

You are entitled to receive a paper copy of this Notice at any time. To obtain a paper copy, contact Precision at privacy@precisionorthomd.com or call 800-585-0375.

9. Right to File a Complaint

If you believe your privacy rights have been violated, you may file a complaint with Precision or with the Secretary of the Department of Health and Human Services. To file a complaint with Precision, contact us at privacy@precisionorthomd.com or 800-585-0375. All complaints must be submitted in writing. You will not be retaliated against for filing a complaint.

10. Right to Provide an Authorization for Other Uses and Disclosures

Precision will obtain your written authorization for uses and disclosures that are not identified by this Notice or permitted by applicable law. Further, Precision will never share PHI for marketing purposes or sell your information unless you give Precision written permission. Any authorization you provide to us regarding the use and disclosure of PHI may be revoked at any time in writing. After you revoke your authorization, we will no longer use or disclose PHI for the reasons described in the authorization.

11. Right to Discuss This Notice with a Representative

You have a right to discuss this notice with one of our representatives. You may request this discussion by contacting the Privacy Officer at privacy@precisionorthomd.com or 800-585-0375.

Website Data Practices

This website does not collect any personal information, use cookies, or employ any tracking or analytics technologies. No data is gathered from visitors through this site.

This website includes links and integrations with the following independent third-party platforms. Each operates under its own privacy policy, and any information you provide to these services is governed by their respective privacy practices — not this website:

• Phreesia — appointment self-scheduling and appointment request forms
• ModMed — patient portal for medical records, communications, and bill payments for Precision Orthopedics and Sports Medicine and Up Orthopedics
• Waystar — online bill payment for Charles Regional Surgical Center and Park Center Surgical Center
• Google Translate — language translation services; use of this feature is subject to Google's privacy policy
• YouTube (Google) — video content embedded on provider and location pages; we use YouTube's privacy-enhanced mode, which limits data collection to only when a video is played
• Facebook, Instagram, LinkedIn, YouTube — links to our social media profiles; visiting those platforms is subject to their respective privacy policies

We encourage you to review the privacy policies of any third-party platform before submitting personal or health-related information.