In Time of Need Incorporated ("we," "us," or "the organization") is required by law to maintain the privacy of your protected health information ("PHI"), provide you with this notice of our legal duties and privacy practices with respect to your PHI, and notify you following a breach of unsecured PHI. We are required to abide by the terms of this notice for as long as it remains in effect.

How We May Use and Disclose Your Health Information

We may use and disclose your PHI for the following purposes without your written authorization:

• Treatment: We may use and disclose your PHI to provide, coordinate, or manage your behavioral health treatment and related services, including sharing information with other providers involved in your care.
• Payment: We may use and disclose your PHI to obtain payment for services we provide to you, including billing and collections activities, and to determine eligibility or coverage.
• Health Care Operations: We may use and disclose your PHI for activities necessary to run our organization and ensure quality care, including quality assessment, staff training, licensing, and business management.
• As Required by Law: We will disclose your PHI when required to do so by federal, state, or local law.
• Public Health and Safety: We may disclose PHI to prevent or lessen a serious and imminent threat to the health or safety of you or others, and to public health authorities as authorized by law.
• Victims of Abuse, Neglect, or Domestic Violence: We may disclose PHI to appropriate government authorities if we reasonably believe you may be a victim of abuse, neglect, or domestic violence.
• Health Oversight Activities: We may disclose PHI to a health oversight agency for oversight activities authorized by law, including audits and investigations.
• Judicial and Administrative Proceedings: We may disclose PHI in response to a court or administrative order, subpoena, discovery request, or other lawful process.
• Law Enforcement: We may disclose PHI for law enforcement purposes as required or permitted by law.
• Research: We may use or disclose PHI for research purposes when an Institutional Review Board or Privacy Board has approved the research and established protocols to protect the privacy of your information.

42 CFR Part 2 — Additional Protections for Substance Use Disorder Records

If any of your records relate to substance use disorder treatment, those records may be subject to additional federal confidentiality protections under 42 CFR Part 2, which generally prohibit disclosure of such records without your specific written consent, except in limited circumstances such as medical emergencies or as otherwise permitted by law. Where 42 CFR Part 2 applies, it provides greater protection than HIPAA and we will follow the more protective standard.

Uses and Disclosures Requiring Your Written Authorization

Other than the situations described above, we will not use or disclose your PHI without your written authorization. This includes, but is not limited to:

• Most uses and disclosures of psychotherapy notes, where applicable
• Uses and disclosures for marketing purposes
• Disclosures that constitute a sale of PHI

You may revoke an authorization at any time, in writing, except to the extent we have already taken action in reliance on it.

Your Rights Regarding Your Health Information

• Right to Inspect and Copy: You have the right to inspect and obtain a copy of your PHI that we maintain, with limited exceptions. Requests must be made in writing.
• Right to Amend: You have the right to request an amendment to your PHI if you believe it is incorrect or incomplete. We may deny your request under certain circumstances.
• Right to an Accounting of Disclosures: You have the right to receive a list of certain disclosures we have made of your PHI, other than disclosures for treatment, payment, healthcare operations, and certain other exceptions.
• Right to Request Restrictions: You have the right to request a restriction on certain uses and disclosures of your PHI. We are not required to agree to all requested restrictions, but if we agree, we will comply except in an emergency.
• Right to Request Confidential Communications: You have the right to request that we communicate with you about your PHI in a certain way or at a certain location.
• Right to a Paper Copy of This Notice: You have the right to obtain a paper copy of this notice at any time, even if you have agreed to receive it electronically.
• Right to Be Notified of a Breach: You have the right to be notified if a breach of your unsecured PHI occurs.
• Right to Choose Someone to Act for You: If you have given someone medical power of attorney or if someone is your legal guardian, that person may exercise your rights and make choices about your PHI.

How to Exercise Your Rights

To exercise any of the rights described in this notice, please submit a written request to our Privacy Officer using the contact information below. Request forms are available upon request.

Our Responsibilities

• We are required by law to maintain the privacy and security of your PHI.
• We will let you know promptly if a breach occurs that may have compromised the privacy or security of your PHI.
• We must follow the duties and privacy practices described in this notice and give you a copy of it.
• We will not use or share your information other than as described here unless you tell us we can in writing. If you tell us we can, you may change your mind at any time by notifying us in writing.

Changes to This Notice

We reserve the right to change this notice at any time, and to make the revised notice effective for PHI we already have as well as information we receive in the future. A copy of our current notice will always be posted on our website and available at our offices upon request, and will contain the effective date on the first page.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services, Office for Civil Rights. You will not be retaliated against for filing a complaint.