HIPAA Notice of Privacy Practices

How We Protect Your Health Information

FOR THE BEST EXPERIENCE, USE A LAPTOP OR DESKTOP.

Notice of Privacy Practices

Effective Date: July 15, 2026

Your Information. Your Rights. Our Responsibilities.

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

This Notice of Privacy Practices describes how 901 Home Health Care may use and disclose your protected health information, the rights you have concerning that information, and the responsibilities we have to protect it.

“Protected health information,” or “PHI,” generally means information about your health, healthcare, or payment for healthcare that identifies you or could reasonably be used to identify you.

This notice applies to PHI created or received by 901 Home Health Care in connection with providing and coordinating healthcare services.

Important Website Notice

The 901 Home Health Care website is provided for general informational, business, and employment-related purposes.

Do not submit patient information, medical information, protected health information, medical records, referral documents, physician orders, insurance information, or details about a patient’s health condition through the website.

The website does not contain a patient referral form, patient intake form, patient portal, or secure clinical communication system. The only website forms are:

  • A general inquiry form
  • An employment application form

Neither form may be used to submit a patient referral or communicate information about a patient.

Do not use the general inquiry form to:

  • Refer a patient for home health services
  • Submit a patient’s name, date of birth, address, diagnosis, medical history, or insurance information
  • Upload medical records, physician orders, discharge documents, or referral materials
  • Discuss a current patient’s care, services, condition, medication, or plan of care
  • Request changes to a patient’s services
  • Communicate with a nurse, therapist, physician, or other clinician about a patient
  • Report an urgent change in a patient’s condition
  • Request emergency medical assistance

Do not use the employment application form to:

  • Include patient names or identifying details
  • Submit medical records or clinical documents
  • Include patient information in a résumé, portfolio, case study, attachment, or work sample
  • Describe a former or current patient in a way that could identify that person
  • Submit any other confidential patient or clinical information

Patient referrals must be made directly through the referral channels designated by 901 Home Health Care.

Referral Phone:
Secure Referral Fax:
Other Approved Referral Method:

The website is not monitored continuously and must not be used for urgent clinical communications or emergencies. Call 911 or seek immediate medical assistance in the event of a medical emergency.

Information collected through the website’s general inquiry and employment forms is addressed in our Website Privacy Policy. This Notice of Privacy Practices governs PHI that we create or receive through our authorized clinical, referral, care-coordination, billing, and healthcare operations.

If patient information is submitted through a website form despite these instructions, we may securely delete the submission, decline to process it, or contact the sender and direct the sender to an appropriate referral or clinical communication channel. We will take any additional action required by applicable law.

Your Rights

You have certain rights concerning your health information. This section explains those rights and some of our responsibilities.

Obtain an Electronic or Paper Copy of Your Health Information

You may ask to see or receive an electronic or paper copy of your medical record and other health information we maintain about you.

We will generally provide a copy or summary of your health information within 30 days after receiving your request. We may charge a reasonable, cost-based fee as permitted by law.

In limited circumstances, we may deny access to certain information. If we deny your request, we will explain the reason and tell you whether the decision may be reviewed.

To request access to your records, contact our Privacy Officer using the information at the end of this notice. Do not request medical records through the website’s general inquiry form.

Ask Us to Correct Your Health Information

You may ask us to correct health information that you believe is incorrect or incomplete.

We may deny the request in certain circumstances, including when we did not create the information or believe the information is accurate and complete. If we deny your request, we will explain the reason in writing, generally within 60 days.

You may provide a written statement of disagreement if your amendment request is denied.

Request Confidential Communications

You may ask us to contact you in a particular way or at a particular location.

For example, you may ask us to:

  • Call you on a specific telephone number
  • Avoid leaving detailed voicemail messages
  • Send mail to a different address
  • Communicate through an authorized representative

We will accommodate reasonable requests. You do not have to explain why you are making the request.

Ask Us to Limit What We Use or Disclose

You may ask us not to use or disclose certain health information for treatment, payment, or healthcare operations.

We are generally not required to agree to the request and may deny it when, for example, the restriction could affect your care. If we agree to a restriction, we will follow it except when the information is needed to provide emergency treatment or when disclosure is otherwise required by law.

If you pay for a healthcare service or item entirely out of pocket, you may ask us not to disclose information about that service or item to your health plan for payment or healthcare operations. We will agree to that request unless the disclosure is required by law.

Receive an Accounting of Certain Disclosures

You may request a list, called an “accounting of disclosures,” showing certain disclosures of your health information made during the six years before the date of your request.

The accounting generally will not include disclosures:

  • For treatment, payment, or healthcare operations
  • Made directly to you
  • Made with your written authorization
  • Made to family members or others involved in your care when permitted by law
  • Made for certain national security, intelligence, or law-enforcement purposes
  • Otherwise excluded from the accounting requirement by law

We will provide one accounting during any 12-month period without charge. We may charge a reasonable, cost-based fee for additional accountings requested within the same 12-month period. We will notify you of the cost before completing the request.

Receive a Copy of This Notice

You may request a paper copy of this notice at any time, even if you previously agreed to receive it electronically.

A current copy will be available on our website and from our Privacy Officer.

Choose Someone to Act for You

If another person has legal authority to act for you, such as a legal guardian, healthcare agent, or person holding an appropriate medical power of attorney, that person may exercise your rights and make choices concerning your health information.

We will verify that the person has appropriate authority before taking action.

File a Privacy Complaint

You may file a complaint if you believe your privacy rights have been violated.

You may submit a complaint directly to our Privacy Officer using the contact information at the end of this notice.

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights:

U.S. Department of Health and Human Services
Office for Civil Rights
200 Independence Avenue, S.W.
Washington, D.C. 20201

Telephone: 1-877-696-6775

Complaints may also be filed through the HHS Office for Civil Rights online complaint portal.

901 Home Health Care will not retaliate against you for filing a complaint or exercising any of your privacy rights.

Your Choices

For certain health information, you may tell us your preferences about what we disclose.

Family Members, Friends, Caregivers, and Others Involved in Your Care

You may tell us whether we may disclose relevant health information to:

  • A family member
  • A close friend
  • A personal caregiver
  • A person involved in your healthcare
  • A person involved in paying for your healthcare
  • Another person you identify

We will generally follow your instructions.

If you are unable to communicate your preference, such as during an emergency or when you are unconscious, we may disclose relevant information when we reasonably believe the disclosure is in your best interest.

We may also disclose information when necessary to reduce or prevent a serious and imminent threat to the health or safety of you or another person.

Disaster-Relief Activities

We may disclose limited information to an organization assisting with disaster-relief efforts so that family members or others responsible for your care may be notified of your location, condition, or death.

When practical, we will give you an opportunity to agree or object before making the disclosure.

Uses Requiring Written Authorization

We generally will not use or disclose your health information for the following purposes without your written authorization:

  • Marketing purposes, except for communications permitted without authorization by law
  • Sale of your health information
  • Most uses and disclosures of psychotherapy notes, when applicable
  • Other purposes not described in this notice

If you provide written authorization, you may revoke it at any time by notifying us in writing. Revocation will not affect actions we already took in reliance on the authorization.

[Choose the statement that reflects the organization’s practices:]

Option A — No fundraising:
901 Home Health Care does not use PHI to send fundraising communications.

Option B — Fundraising may occur:
We may contact you for fundraising purposes as permitted by law. You may tell us not to contact you again for fundraising purposes, and we will honor that request.

How We May Use and Disclose Your Health Information

We typically use or disclose health information for treatment, payment, and healthcare operations.

Treatment

We may use your health information and disclose it to other healthcare professionals involved in your care.

For example:

  • A home health nurse may discuss your condition with your physician.
  • A physical therapist may coordinate with your nurse or occupational therapist.
  • We may receive information from a hospital, rehabilitation facility, physician, or case manager to coordinate your home health services.
  • We may provide relevant information to a pharmacy, laboratory, medical equipment provider, or other healthcare provider involved in your treatment.
  • Members of your care team may review your health information to coordinate your plan of care.

Payment

We may use and disclose your health information to bill for services and obtain payment.

For example, we may provide information to:

  • Medicare
  • A private health insurance plan
  • A managed-care organization
  • Another payer
  • A billing or claims-processing service working on our behalf

The information may be used to determine eligibility, obtain authorization, submit claims, respond to coverage questions, coordinate benefits, or collect payment.

Healthcare Operations

We may use and disclose your health information to operate 901 Home Health Care and improve the services we provide.

Healthcare operations may include:

  • Care coordination and case management
  • Quality assessment and improvement
  • Patient-safety activities
  • Staff training and evaluation
  • Clinician credentialing
  • Licensing and accreditation
  • Compliance reviews
  • Auditing
  • Billing administration
  • Legal and risk-management activities
  • Business planning and management
  • Customer service
  • Reviewing the performance of our clinicians and staff
  • Investigating complaints
  • Preventing fraud, waste, and abuse
  • Contacting you when necessary regarding your care or services

For example, we may review health information to evaluate whether our nursing and therapy services meet quality standards.

Business Associates

We may disclose health information to companies and professionals that perform services for us and require access to PHI.

Examples may include:

  • Billing providers
  • Information-technology providers
  • Electronic health record providers
  • Medical-record storage providers
  • Consultants
  • Accountants
  • Attorneys
  • Auditors
  • Compliance vendors
  • Secure communications providers

When required, these organizations are considered our business associates. They must enter into written agreements requiring them to appropriately safeguard PHI and use it only for permitted purposes.

Appointment, Visit, and Service Communications

We may use your health information to contact you about:

  • Scheduled home visits
  • Changes to a visit schedule
  • Care coordination
  • Service updates
  • Treatment alternatives
  • Health-related benefits or services
  • Equipment or supplies related to your care
  • Follow-up communications

Public Health and Safety Activities

We may disclose health information for public-health and safety purposes when permitted or required by law.

These activities may include:

  • Preventing or controlling disease
  • Reporting certain communicable diseases
  • Reporting adverse reactions to medications or medical products
  • Assisting with product recalls
  • Reporting suspected abuse, neglect, exploitation, or domestic violence
  • Preventing or reducing a serious threat to health or safety
  • Reporting information to appropriate public-health authorities
  • Reporting information required by healthcare licensing authorities

Health Oversight Activities

We may disclose health information to government agencies or other authorized organizations for oversight activities permitted by law.

These activities may include:

  • Audits
  • Investigations
  • Inspections
  • Licensing actions
  • Accreditation reviews
  • Compliance reviews
  • Government benefit-program oversight
  • Civil, administrative, or criminal proceedings authorized by law

Compliance With the Law

We will disclose health information when federal, Tennessee, or other applicable law requires us to do so.

This may include disclosing information to the U.S. Department of Health and Human Services when it is investigating or determining our compliance with federal privacy law.

When another applicable law provides greater privacy protection than HIPAA, we will follow the more protective law.

Abuse, Neglect, Exploitation, or Domestic Violence

We may disclose health information to an appropriate government or protective-services authority when we reasonably believe an individual may be a victim of abuse, neglect, exploitation, or domestic violence and the disclosure is permitted or required by law.

Serious Threats to Health or Safety

We may use or disclose health information when necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public.

Any disclosure will be made only to a person reasonably able to help prevent or reduce the threat.

Workers’ Compensation

We may disclose health information as authorized by and to the extent necessary to comply with workers’ compensation laws or similar programs.

Law-Enforcement Purposes

We may disclose health information to law-enforcement officials when the disclosure is permitted or required by law.

Examples may include:

  • Responding to certain court orders, warrants, subpoenas, or administrative requests
  • Reporting certain wounds or injuries when required by law
  • Locating a suspect, fugitive, missing person, or witness as permitted by law
  • Reporting a death that may have resulted from criminal conduct
  • Reporting criminal conduct occurring on our premises or against our workforce
  • Responding to an emergency involving suspected criminal activity

All such disclosures are subject to the limitations and conditions imposed by applicable law.

Judicial and Administrative Proceedings

We may disclose health information in response to a court or administrative order.

We may also disclose information in response to a subpoena, discovery request, or other lawful process when the legal requirements for disclosure have been satisfied.

Coroners, Medical Examiners, and Funeral Directors

We may disclose health information to a coroner or medical examiner for purposes such as:

  • Identifying a deceased person
  • Determining cause of death
  • Performing duties authorized by law

We may also disclose relevant information to a funeral director when necessary for the funeral director to perform authorized duties.

Organ and Tissue Donation

We may disclose health information to organ-procurement organizations and other entities involved in organ, eye, or tissue donation or transplantation.

Research

We may use or disclose health information for research only when the use or disclosure satisfies applicable legal requirements.

This may include research approved through an appropriate authorization, waiver, institutional review process, or other legally permitted process.

Specialized Government Functions

We may disclose health information for certain specialized government functions when permitted by law, including:

  • Military and veterans’ activities
  • National-security and intelligence activities
  • Protective services for certain government officials
  • Medical-suitability or government benefit determinations
  • Correctional institution or law-enforcement custodial activities

Required Reporting and Regulatory Activities

We may disclose health information to authorized federal, state, or local authorities for activities related to:

  • Healthcare licensing
  • Medicare or Medicaid participation
  • Fraud and abuse investigations
  • Accreditation
  • Professional discipline
  • Patient-safety reporting
  • Mandatory healthcare reporting

Information Receiving Additional Protection

Certain types of health information may receive additional protection under federal or Tennessee law. This may include information concerning:

  • Substance-use-disorder treatment
  • Mental or behavioral health treatment
  • Psychotherapy notes
  • HIV or AIDS testing and treatment
  • Genetic testing
  • Certain communicable diseases
  • Records involving minors
  • Other specially protected healthcare services

When a law provides stronger protection than HIPAA, we will follow that law.

Substance-Use-Disorder Records

To the extent that we create, receive, or maintain substance-use-disorder patient records protected by 42 C.F.R. Part 2, those records are subject to additional federal confidentiality protections.

Such records, or testimony describing their contents, generally may not be used or disclosed in a civil, criminal, administrative, or legislative investigation or proceeding against the patient unless:

  1. The patient provides specific written consent; or
  2. A court issues an appropriate order and any other legally required process is satisfied.

If we use Part 2 information for fundraising communications, when legally permitted, we will give the patient clear and conspicuous advance notice and an opportunity to opt out.

Our Responsibilities

901 Home Health Care is required by law to:

  • Maintain the privacy and security of your PHI
  • Provide you with this notice describing our legal duties and privacy practices
  • Follow the duties and privacy practices described in the notice currently in effect
  • Notify affected individuals following a breach of unsecured PHI when notification is required by law
  • Limit uses, disclosures, and requests for PHI to the minimum necessary when the minimum-necessary standard applies
  • Provide reasonable safeguards for oral, written, and electronic PHI
  • Honor your privacy rights as required by law

We will not use or disclose your health information for purposes other than those described in this notice unless you provide written authorization or the use or disclosure is otherwise permitted or required by law.

You may revoke an authorization in writing at any time. Revocation will not affect information already used or disclosed in reliance on the authorization.

Changes to This Notice

We may change the terms of this notice and our privacy practices.

Changes may apply to all PHI we maintain, including information created or received before the revised notice takes effect.

When this notice is materially revised:

  • The revised notice will be available upon request
  • The revised notice will be posted on our website
  • Paper copies will be available from our Privacy Officer
  • The effective date at the beginning of the notice will be updated
  • We will take any additional steps required by law

Questions, Requests, and Complaints

For questions about this notice, to exercise a privacy right, to request a copy of your medical records, or to file a complaint, contact:

Privacy Officer
901 Home Health Care

Telephone:
Fax:
Email:

Do not send PHI, medical records, patient referrals, or detailed clinical information to a general website or employment email address.

The Privacy Officer will provide instructions for using an approved, secure communication method when necessary.