DEVLAB, LLC (dba DevLab bio)

HIPAA Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN
GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

DevLab, LLC (dba DevLab bio) is committed to protecting the privacy of your healthcare information. This Notice of Privacy Practices describes how we may use and disclose your “protected health information” (PHI) to carry out laboratory testing, payment for laboratory testing, and for other purposes that are permitted or required by law. It also describes your rights to access and control your PHI. PHI is information about you,  including demographic information, that may identify you and that relates to your past, present or future physical or mental condition and related health care services.

Uses and Disclosures of Protected Health Information by the Laboratory

Your PHI may be used and disclosed by our laboratory for the purpose of providing laboratory services to your healthcare provider, for insurance billing and receipt of payments for services you receive, to support the operation of the laboratory, and any other use required by law. We may use or disclose, as needed, your PHI to support the operations of our laboratory. These activities include, but are not limited to, quality assessment activities, accreditation/compliance inspection activities, and conducting or arranging
for other business activities. For example, we may disclose your protected health information to accrediting agencies as
part of an accreditation survey. If required, we are permitted by law to use or disclose your PHI without your authorization in the following additional situations:

          • To a health oversight agency, such as the Texas Department of State Health Services, Center for Disease Control,
            or Food and Drug Administration
          • In response to a court or administrative order, subpoena, or warrant
            For workers’ compensation programs
          • For public health activities (e.g., reporting abuse, neglect, or domestic violence)
          • To law enforcement officials in certain circumstances
          • To a coroner, medical examiner, or funeral director
          • To organizations that handle organ, eye, or tissue procurement or transplantation
          • Certain limited research purposes

Other permitted and required uses and disclosures will be made only with your consent, authorization, or opportunity to object, unless required by law. You may revoke this authorization at any time, in writing, except to the extent that your physician or the laboratory has taken an  ction in reliance on the use or disclosure indicated in the authorization.

Under the law, we must make disclosures to you and when required by the Secretary of the Department of Health and
Human Services to investigate or determine our compliance with the requirements of 45 CFR, Part 164.

Patient Rights with Respect to Protected Health Information

You have the right to request copies of your PHI. Under federal law, however, you may not inspect or copy information
compiled in reasonable anticipation of, or use in, a civil, criminal, or administrative action or proceeding, and PHI that is
subject to law that prohibits access to PHI. You may ask us not to use or disclose any part of your PHI for the purposes of our laboratory’s operation. You may also request that any part of your PHI not be disclosed to family members or friends who may be involved in your care or for notification purposes as described in this HIPAA Notice of Privacy Practices. Your request must state the specific restriction requested and to whom you want the restriction to apply. Our laboratory is not required to agree to a restriction that you may request. If our laboratory believes it is in your best interest to permit use and disclosure of your PHI, it will not be restricted. You then have the right to use another laboratory for testing. You have the right to receive an accounting of certain disclosures we have made, if any, of your PHI.

You may have the right to have our organization amend your PHI. If we deny your request for amendment, you have the
right to file a statement of disagreement with us and we may prepare a rebuttal to your statement and will provide you
with a copy of any such rebuttal. You have the right to request to receive confidential communications from us by alternative means or at an alternative location.

You have the right to obtain a copy of this HIPAA Notice of Privacy Practices from us, upon request.
You may file a complaint with the laboratory or with the Secretary of the Department of Health and Human Services if you
believe your privacy rights have been violated by us. You may file a complaint with us by contacting us at testing@devlabbio.com. We will not retaliate against you for filing a complaint.

We are required by law to maintain the privacy of, and provide individuals with, this notice of our legal duties and privacy
practices with respect to PHI, if you have any questions or concerns please contact us at testing@devlabbio.com.

Privacy Complaint Report

To file complaints regarding your privacy as it relates to clinical test results, complete the form below and email directly to testing@devlabbio.com.

Privacy Complaint Report