Notice of QuadMed Privacy Practices

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

Effective Date: October 2026

QuadMed, through its affiliated Health & Wellness Centers, QuadMed Everywhere, wellness and biometrics programs, and pharmacies, provides health care to patients jointly with health care providers and other organizations, and gathers information about patients including, but not limited to, name, home address, email address(es), phone, gender, date of birth, social security number or employee identification number, health information (including primary care information, occupational health and workers’ compensation information, wellness program data, and biometric data), and other information patients may voluntarily share during a course of treatment or as part of an employer or health plan sponsored program administered by QuadMed. The following persons and entities, who have agreed to be bound by this notice, will jointly use this notice for convenience to meet federal law requirements; provided that, each person and entity is solely and separately responsible and liable for complying with this notice and applicable law:

• All employed staff or volunteers of QuadMed, including staff of affiliated centers and pharmacies.
• Any health care professional who agrees to be bound by this notice and who treats you at any of our facilities with respect to your information stored at the facility. Please be aware that certain health care professionals providing services to you at QuadMed’s affiliated centers and pharmacies may be independent contractors, which means they are not employed or controlled by QuadMed.
• Any of our business partners or associates with whom we share health information and who agree to be bound by this notice.

Purpose: The Health Insurance Portability and Accountability Act (“HIPAA”) and other privacy related regulations (referred to in this Notice as the “Privacy Rule”) requires QuadMed to inform its patients about the ways that QuadMed may use and disclose your health information.

In addition, the Privacy Rule requires QuadMed to inform patients of your rights regarding disclosures of your health information.

It is the policy of QuadMed to keep health information confidential and not disclose patient health information without your authorization or as specifically permitted or required by federal or state law as described in this Notice. We are required to provide you with a copy of this Notice and to abide by the terms of this Notice as currently in effect. The Privacy Rule also requires QuadMed to make a good faith effort to obtain written acknowledgement of your receipt of this Notice.

State laws and certain federal laws may be more protective of certain information than the federal Privacy Rule. For instance, many states restrict the use or disclosure of your information relating to treatment for mental health, developmental disabilities, alcoholism, drug dependence or information concerning HIV status, without obtaining your authorization. Certain federal laws may also restrict the use or disclosure of such information. Some states also have specific procedures for responding to discovery requests or subpoenas or for disclosing information to coroners or funeral directors. QuadMed will not use your information in any way that is not permitted by state law or other more restrictive federal laws. In the event there is any breach of your unsecured health information, we are required and will notify you of such breach.

Any questions about this Notice, QuadMed’s privacy practices or questions you may have regarding possible violations of your privacy may be directed to QuadMed’s Privacy Officer. To facilitate complaints, QuadMed requests that you use our complaint form available at QuadMed reception desks. This form will be sent to the QuadMed Privacy Officer who will address any concerns. No patient will be retaliated against for filing a complaint.

All forms referred to in this document are available to you through QuadMed Reception and through the QuadMed Privacy Officer at Compliance@quadmedical.com or 1-888-417-1001.

In addition to filing a complaint at QuadMed, any patient has the right to complain to the Secretary of the United States Department of Health and Human Services by sending a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201, calling 1-877-696-6775, or visiting www.hhs.gov/ocr/privacy/hipaa/complaints/ .

Uses and disclosures of your health information for treatment, payment or health care operations

QuadMed may use and disclose your health information without your authorization for treatment, payment and health care operations. When used or disclosed for payment or health care operations purposes, QuadMed will limit the health information used or disclosed to that which is minimally necessary to accomplish the purpose of the use or disclosure.

1. Treatment: QuadMed may use or disclose your health information to treat you, to facilitate the appropriate transfer of information to consulting specialists or other referral centers (e.g., the hospital or surgical centers), to ensure continuity of care and coordinate your health care by providing case management services. For example, QuadMed doctors may disclose your health information to each other if they are consulting each other in order to best manage your care at QuadMed.

2. Payment: QuadMed may use and disclose your health information to send bills and to collect payment from you, your health plan, and other third-parties for services you have received at QuadMed. For example, QuadMed may disclose your health information to your health plan in order to receive reimbursement for the services you received.

3.  Health care operations: In order to ensure quality care for our patients, QuadMed may use or disclose your health information for health care operations. These uses and disclosures are necessary to provide quality care to all patients and to facilitate the functioning of QuadMed centers. For example, QuadMed may use health information from your medical record to help evaluate its treatment and services provided, and to develop guidelines related to treatment, for chronic health problems like back pain, depression, asthma or hyperlipidemia. QuadMed may also disclose your health information to your health plan for the health plan’s and QuadMed’s population-based activities.

4.  Health Information Exchanges. QuadMed may disclose your information with other healthcare providers or healthcare entities as permitted by law through Health Information Exchanges (HIEs) in which QuadMed participates. You may choose to opt-out of HIEs by contacting QuadMed.

5.  Artificial Intelligence. QuadMed may use technology that relies on machine learnings and artificial intelligence for certain services to carry out treatment, payment, and healthcare operations. For example, QuadMed may utilize AI for ambient listening, such as summarizing an encounter to allow the provider to focus on the conversation with the patient. QuadMed may also use AI to assist in generating certain documents or automate workflows.  In all cases, AI will not be independently utilized to determine any course of treatment, diagnosis, or prescriptions as such determinations are made by the provider in their independent professional judgment.

Other uses and disclosures of your health information permitted without your authorization

Without your written authorization, QuadMed may use or disclose your health information for the following purposes to the extent not otherwise restricted by state law or other more restrictive federal laws:

1. As required by law: QuadMed is permitted to disclose your health information when required to do so by state, federal or local law.

2. Public health policy: QuadMed is permitted to disclose your health information for public health activities such as:

• To prevent or control disease, injury or disability, to report deaths, and for public health surveillance or interventions
• To report child abuse or neglect
• To the FDA, to report adverse events or product defects, to track products, to enable product recalls, or to conduct post-market surveillances as required by the FDA
• To notify a person who may have been exposed to a disease or may be at risk for contracting or spreading a disease or condition
• To your employer under limited circumstances for medical surveillance of the workplace or evaluating whether you have a work-related illness or injury when your employer needs such information to comply with its obligations under the law
• To a school at which you are a student or prospective student, but the information that may be disclosed is limited to proof of immunization

3. Organ and tissue donation: QuadMed may disclose health information to organ procurement organizations or organ donation banks to facilitate organ and tissue donation and transplantation.

4.  Research: QuadMed may participate in research studies. For certain research activities, an Institutional Review Board (IRB) or Privacy Board may approve uses and disclosures of your health information without your authorization.

5.  Circumstances of serious and imminent threat to health or safety: If there is a serious and imminent threat to your health or safety or the health or safety of the public or another person, QuadMed may disclose your health information to persons able to prevent the threat.

6. Victims of abuse, neglect or domestic violence: In certain circumstances, QuadMed may disclose health information if QuadMed reasonably believes someone has been the victim of abuse, neglect or domestic violence.

7. Coroners, medical examiners and funeral directors: QuadMed may disclose health information to a coroner, medical examiner or funeral director to identify a deceased person or to assist with determining the cause of a death.

8. Health oversight activities: QuadMed may disclose health information to certain health oversight agencies for activities authorized by law, such as audits, investigations, accreditations, licensure or disciplinary activities.

9. Workers’ compensation: QuadMed may disclose your medical records to the worker’s compensation programs to the extent authorized by state or federal laws. For example, if you injure your back at work, QuadMed may release recommendations on your diagnosis, treatment, work modification/time off and expected length of illness to your employer’s worker’s compensation department or representative.

10. Specialized government functions: QuadMed may disclose your health information for specific government activities, including the following:

• Inmates and Law Enforcement Custody: If you are an inmate of a correctional institution or under the custody of a law enforcement official, QuadMed may disclose health information to the correctional institution or law enforcement official as necessary:

1. For the institution to provide you with health care
2. To protect your health and safety or the health and safety of others; or
3. For the safety and security of the correctional institution.

• Medical suitability determinations: QuadMed may disclose your health information to the Department of State for use in making medical suitability determinations.
• Military and veterans: If you are a member of the Armed Forces, QuadMed may disclose your health information as required by military command authorities for the proper execution of military missions.
• National security and intelligence: QuadMed may disclose your health information to authorized federal officials for intelligence, counter-terrorism and national security activities.
• Protective services for the President and others: QuadMed may disclose your health information to those federal officials providing protection to the President, other authorized persons, or foreign heads of state or to conduct special investigations.

11. Judicial and administrative proceedings: QuadMed may disclose health information in response to a court or administrative order, a subpoena, a discovery request or other lawful process.

12. Law enforcement: QuadMed may disclose your health information to law enforcement officials as required by law or as directed by a court order or other lawful process, and in other limited circumstances.

13. Family members and friends for care and payment and notification: QuadMed may disclose health information to a family member or friend who is involved in your medical care or who helps pay for your care. QuadMed may also make these disclosures after your death as authorized by law unless doing so is inconsistent with any prior expressed preference.

14. Disaster relief: QuadMed may disclose health information about you to assist with disaster relief efforts or to notify a family member or friend of your medical condition and that you are in a QuadMed center.

15. Patient directory: QuadMed may disclose the following information regarding your presence in a QuadMed center: your name, location of the facility and general condition.

16. Appointment reminders: QuadMed may use your information and contact you to provide appointment reminders.

17. Program information. QuadMed may use your information and contact you to provide information about treatment alternatives or other health related benefits and services that may be of interest to you.

18. Anonymous data.  QuadMed may use or disclose de-identified protected health information when personal information about an individual has been removed so that the remaining information can no longer be identified to that individual. 

19. Employers. QuadMed may use or disclose your information if you receive occupational health services, including medical surveillance of the workplace or evaluating whether you have a work-related illness or injury when your employer needs such information to comply with its obligations under the law. QuadMed may also use or disclose your information to your employer if you sign an authorization permitting QuadMed to use or disclose information to your employer, which may include information related to employer-sponsored health and wellness program services and the results of testing, screening, and evaluation such as drug and alcohol tests and pre-employment and post-employment testing.

20. Business associates. QuadMed may use or disclose your information to certain third parties for certain services, such as billing, legal, accounting, or consulting, if QuadMed enters into a business associate agreement with the third party. The third party is required by law to protect your information.

Fundraising

QuadMed may use your demographic information (such as name, contact information, age, gender, and date of birth), the dates you received services from us, the department of your service, your treating physician, outcome information, and health insurance status to contact you in an effort to raise money for charitable purposes. QuadMed may also disclose this information to a foundation related to QuadMed so that the foundation may contact you to raise money for the foundation. You have the right to opt out of receiving fundraising communications.

Other uses and disclosures

Any other uses or disclosures of your health information not addressed in this Notice will be made only with your written authorization. Some examples include:

1. Sale of your health information: QuadMed will not sell your health information without your written authorization except as otherwise permitted by law.

2. Psychotherapy notes: QuadMed is required to obtain your written authorization before QuadMed may use or disclose your psychotherapy notes, except for: use by the originator of the psychotherapy notes for treatment; use or disclosure by QuadMed to its own mental health training programs; or use or disclosure by QuadMed to defend itself in a legal action or other proceeding brought by the individual.

You may revoke an authorization in writing at any time except to the extent QuadMed relied on it in making an authorized use or disclosure. QuadMed requests that you use our Revocation of Authorization to Release Protected Health Information form for this purpose.

Rights regarding health information

You have numerous rights regarding how your health information is used. Your rights include the following:

1. Right to request restrictions: You have the right to request that we restrict or limit our uses and disclosures of your health information. To make a request for a restriction or limitation, we will provide you with a form to fill out. We are required to comply with your request that we restrict disclosures to a health plan for purposes of payment or health care operations if you paid in-full, out-of-pocket, for the health care item or service. We will attempt to accommodate other reasonable requests, but it is important to understand that QuadMed is not required to agree to other requests for restrictions.

2. Right to receive confidential communications: You have the right to receive communications that contain health information at alternative locations or by alternative means. For example, patients may request that QuadMed contact them at work for appointment reminders rather than at home provided that the patient provides QuadMed with his or her work contact number. However, QuadMed will not honor a request for alternative contact methods unless the patient provides a sufficient alternative address or contact information.

3.  Right to inspect and copy: You have the right to inspect and copy your health information, not including psychotherapy notes. QuadMed requests that you use the Authorization for Release of Protected Health Information form when exercising this right. You may request an electronic copy of information about you maintained in our electronic medical record. To the extent permitted by law, QuadMed may charge a reasonable fee for the costs of copying, mailing or preparing summary information that responds to your request. You should know that in certain limited circumstances, the law allows QuadMed to deny your request to inspect and copy your records. If you are denied access to your health information, you may request that the denial be reviewed.

4.  Right to amendment: You have the right to have changes made to your health information if you feel it is inaccurate or incomplete. QuadMed requests that you use our Request for Amendment of Health Information form to request these changes. QuadMed will review your request and make the changes if we believe they are appropriate. QuadMed will also distribute these changes to health care providers that you ask be made aware of the change or to others we believe should know of the change. Under some circumstances, QuadMed may deny your request for an amendment to your health information. QuadMed will provide a written response to your request for an amendment and in this response will provide detailed information on how you may review the changes or appeal the denial.

5.  Right to receive an accounting: You have the right to receive an accounting of certain disclosures of your health information made by QuadMed. QuadMed requests that you use the Request for Accounting of Protected Health Information form to receive this log. Your request must specify a time period for the accounting, which may be no longer than six years. QuadMed will provide the first accounting to you in any 12-month period free-of-charge. After this, QuadMed may charge a fee but we will notify you of the fee before we process the request. You have the right to withdraw your request once you have learned that your request will require you to pay a fee.

6.  Right to paper copy: You have the right to receive a paper copy of this Notice at any time. Paper copies are available through QuadMed reception or from the QuadMed Privacy Officer.  An electronic copy is available, on QuadMed’s website at www.quadmedical.com.

Revision of the notice

QuadMed reserves the right to make revisions to this Notice at any time. QuadMed reserves the right to make the revised or changed Notice effective for health information it already has about you, as well as for any health information it receives about you in the future. If QuadMed changes this Notice, QuadMed will promptly update and post the revised Notice in a clear and prominent location in all of its centers and on its website, www.quadmedical.com. QuadMed will also make the revised Notice available to you upon request.