Notice of Privacy Practices

This Notice describes how Protected Health Information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

WHO WILL FOLLOW THIS NOTICE
This Notice describes the privacy practices of Mazzoni Center, including services provided at our facilities. Mazzoni Center facilities include all patient care, research, laboratory, and administrative space owned or leased by Mazzoni Center and any location where Mazzoni Center employees work. All Mazzoni Center employees and departments have access to your Protected Health Information (PHI) solely for the purposes of Mazzoni Center related to administrative, clinical, or billing intent. All employees, medical staff, students, and other members of Mazzoni Center (“we” or “us”) follow the terms of this Notice. Mazzoni Center is required by law to maintain the privacy of your health information (“Protected Health Information” or “PHI”) and to provide you with this Notice.

OUR PLEDGE REGARDING PHI
We understand that information about you and your health is personal. We are committed to protecting all information about you. We create a record of the care and services you receive at Mazzoni Center. This can be referred to as your “chart.” We need this record to provide you with quality care and to comply with certain legal requirements. This notice applies to all of the records of your care generated or maintained by Mazzoni Center whether made by Mazzoni Center personnel or your personal provider. This notice will tell you about the ways in which we may use and disclose PHI about you. We also describe your rights and certain obligations we have regarding the use and disclosure of your information. The law requires us to: Make sure that your Protected Health information is kept private. Provide you with this notice of our legal duties and privacy practices with respect to your information about you; and follow the terms of the notice that is currently in effect.

SUBSTANCE USE DISORDER RECORDS PROTECTED BY 42 CFR PART 2
Some substance use disorder diagnosis, treatment, or referral records may receive additional confidentiality protections under federal law, including 42 CFR Part 2. These records may not be used or disclosed unless permitted by federal law, including with your written consent or as otherwise allowed by 42 CFR Part 2. When permitted by law, you may provide one written consent that allows future uses and disclosures of Part 2-protected records for treatment, payment, and health care operations. Recipients of 42 CFR Part 2-protected records may be restricted from redisclosing those records except as permitted by 42 CFR Part 2 and applicable HIPAA requirements. 42 CFR Part 2-protected records generally may not be used or disclosed in civil, criminal, administrative, or legislative proceedings against you unless you provide written consent or there is a valid court order that meets Part 2 requirements. Mazzoni Center is required to maintain the privacy of 42 CFR Part 2-protected records, provide notice of our legal duties and privacy practices, follow the terms of the notice currently in effect, and notify affected individuals following a breach of unsecured 42 CFR Part 2-protected records when required by law.

HOW WE MAY USE AND DISCLOSE INFORMATION ABOUT YOU
The following categories describe different ways that we use and disclose PHI. For each category of uses of disclosures, we will explain what we mean and try to give some examples. Not every use or disclosure is a category that is listed. However, all the ways we are permitted to use and disclose information will fall within one of the categories. For Treatment at the Mazzoni Center, we may use PHI about you to provide you with medical treatment or services. We may disclose PHI about you to doctors, nurses, technicians, medical students, or other Mazzoni Center personnel who are involved in your care at Mazzoni Center. For example, your provider may need to tell another provider at the Mazzoni Center that you have been hospitalized, so that we can effectively coordinate your care. Staff of the Mazzoni Center also may share PHI about you in order to coordinate the different things you need, such as a specialist referral or lab work. We also may disclose PHI about you to people outside the Mazzoni Center who may be involved in your medical care. Some examples are specialists such as surgeons, radiologists, dentists, or psychiatrists. We may also contact you to provide appointment reminders or information about treatment alternatives or other health-related benefits and services that may be of interest to you. For Payment We may use and disclose PHI about you so that the treatment and services you receive at the Mazzoni Center may be billed to and payment may be collected from an insurance company or a third party. For example, we may need to give your health insurance information about care you received at the Mazzoni Center so your health insurance provider will pay us for this visit. We may also tell your health insurance provider about a treatment you are going to receive to obtain prior approval or to determine whether your insurance carrier will cover the treatment.

TO COMPLY WITH REQUIREMENTS OF OUR FUNDERS
We may use and disclose PHI about you to comply with the requirements of our funders such as government agencies. Our major funding sources require that we provide PHI on a sample of patients for monitoring purposes. All information is coded, using unique identification to protect the identity of each person. We obtain your consent for this disclosure at your first visit. If you are over 18, you may be contacted to confirm eligibility for certain services.

FOR ACCESS TO INCOME SUPPORT, SOCIAL SERVICES AND OTHER PROGRAMS
We may use and disclose PHI about you for social services, entitlements, and other programs. However, before we disclose PHI about you to anyone outside of the Mazzoni Center, we obtain written consent from you.

FOR HEALTH CARE OPERATIONS
We may use and disclose information about you for health care operations. The use and disclosures are necessary to run the Mazzoni Center and make sure that all of our patients receive quality care. For example, we may use PHI to review our treatment and services and to evaluate the performance of our staff in caring for you. We may also combine PHI with various patients to decide what additional services the Mazzoni Center should offer, what services are not needed, and whether certain new treatments are effective. We may also disclose information to doctors, nurses, technicians, medical students, and other Mazzoni Center personnel for review and learning purposes.

FUNDRAISING ACTIVITIES
We do not use personal PHI about you to raise money for the Mazzoni Center. However, we may use data about our practice in general to help raise money. For example, the number of patients we serve with HIV or diabetes, or the percentage of new patients in a given time period may help us convince people to donate money to the Mazzoni Center.

INDIVIDUALS INVOLVED IN YOUR CARE OR PAYMENT FOR YOUR CARE
Except in emergencies (and you are unable to consent for yourself), we will not release PHI about you to a friend or family member who is involved in your medical care without your permission. We will not give information to someone who helps pay for your care unless you specifically request that we do so.

RESEARCH
We always obtain your consent before we use and disclose PHI about you for research purposes. Before you enroll in a research study you will be asked to sign an informed consent, which will describe the purpose of the study, the study procedures, its potential risks and benefits, alternatives to participation in the research study, the study’s procedures for keeping your information confidential, and any compensation you might receive. You have the right to decline to participate in any research study and you have the right to withdraw at any time. If you withdraw from a study, we will stop collecting PHI on you for the study; however, information collected before you withdrew will be part of the study record. As required by law We will disclose medical and behavioral health information about you when required to do so by federal, state or local law.

TO AVERT A SERIOUS THREAT TO HEALTH OR SAFETY
We may use and disclose PHI about you when necessary to prevent a serious threat to yourself, or others, including a reasonable belief that you would be a threat while operating a motor vehicle. In addition, providers are mandated to report reasonable belief that a child or elderly person is being abused or will be abused. Regarding HIV-related information, this is only done consistently under Pennsylvania Act 148. This means that information may be disclosed to a health care provider to provide emergency care or treatment appropriate for that individual.

ORGAN AND TISSUE DONATION
We may release PHI to organizations that handle organ procurement or organ, eye or tissue transplantation or to an organ donation bank, as necessary to facilitate organ or tissue donation and transplantation. This information will only be released with your permission.

MILITARY AND VETERANS
If you are a member of the armed forces, we may release PHI about you as required by military command authorities. We may also release PHI about foreign military personnel to the appropriate foreign military authority.

WORKERS’ COMPENSATION
We may release PHI about you for workers’ compensation or similar programs. These programs provide benefits for work-related injuries or illnesses. We will obtain your consent before we disclose PHI about you.

PUBLIC HEALTH RISKS
We may disclose PHI about you for public health activities. These activities are required by law and generally include the following: To report cases of CDC-defined AIDS and other reportable conditions as required by law; including Syphilis, gonorrhea, chlamydia, and hepatitis; To prevent or control disease, injury or disability; To report births and deaths; To report the abuse or neglect of children, elders and dependent adults; To notify people of recalls of products they may be using To notify a person who may have been exposed to a disease or may be at risk for contracting or spreading a disease or condition; To notify the appropriate government authority if we believe a patient has been the victim of abuse, neglect or domestic violence. We will only make this disclosure if you agree or when required or authorized by law.

HEALTH OVERSIGHT ACTIVITIES
We may disclose PHI to a health oversight agency for activities authorized by law. These oversight activities include, for example, audits, investigations, inspections, and licensure. These activities are necessary for the government to monitor the health care system, government programs, and compliance with civil rights laws.

CORONERS, MEDICAL EXAMINERS AND FUNERAL DIRECTORS
We may release PHI to a coroner or medical examiner. This may be necessary, for example, to identify a deceased person or determine the cause of death. We may also release PHI about patients of the Mazzoni Center to funeral directors as necessary to carry out their duties.

LEGAL PROCEEDINGS AND LAW ENFORCEMENT
We may disclose your PHI in response to a court order, subpoena, or other lawful process when permitted or required by law. Substance use disorder records protected by 42 CFR Part 2 receive additional protections. Part 2-protected records generally may not be used or disclosed to investigate, prosecute, or take legal action against you unless you provide written consent or there is a valid court order that meets Part 2 requirements.

INMATES
If you are an inmate of a correctional institution or under the custody of a law enforcement official, we may release PHI about you to the correctional institution or law enforcement official. This release would be necessary (1) for the institution to provide you with health care; (2) to protect your health and safety or the health and safety of others; or (3) for the safety and security of the correctional institution. We will attempt to obtain your consent before we disclose any information to the correctional institution.

You have the following rights regarding the PHI we maintain about you:

RIGHTS TO INSPECT AND COPY
You have the right to inspect and copy PHI that may be used to make decisions about your care. Usually, this includes medical and billing records but may not include some mental health information. To inspect your PHI, you may request a copy of your records from your provider. It is our policy that this information should be provided to you within 30 days of your request. If you feel you are having a problem obtaining PHI about you, you may reach out to the Compliance Department. If you request a copy of the information, we may charge a fee for the costs of copying, mailing or other supplies associated with your request. We may deny your request to inspect and/or copy in certain extremely limited circumstances. A reason for the denial will be provided to you. If you are denied access to PHI, you may request that the denial be reviewed. Another licensed health care professional chosen by the Mazzoni Center will review your request and the denial. The person conducting the review will not be the person who denied your request. We will comply with the outcome of the review.

RIGHT TO AMEND
If you feel that the information we have about you is incorrect or incomplete, you may ask us to amend the information. You have the right to request an amendment for as long as the information is kept by or for the Mazzoni Center. To request an amendment, you may request “Request to Amend” form for your provider. Generally, we will make such an amendment within 60 days of your request. We may deny your request for an amendment if it is not in writing or does not include a reason to support the request. In addition, we may deny your request if you ask us to amend information that: Was not created by us, unless the person or entity that created the information is no longer available to make the amendment; Is not part of the PHI kept by or for the Mazzoni Center; Is not part of the information which you would be permitted to inspect and copy; or We determine is both accurate and complete as it is currently written.

RIGHT TO AN ACCOUNTING OF DISCLOSURES
You have the right to request an “accounting of disclosures.” This is a list of the disclosures we made of PHI about you, including those for the purposes of treatment, payment and health care operations, (as those functions are described above) if those were made through an electronic health record and with other expectations pursuant to the law. To request this list or accounting of disclosures, you request the “Right to An Accounting of Disclosures” form from your provider. For 42 CFR Part 2-protected records, you may also have the right to receive an accounting of certain disclosures and, where applicable, a list of disclosures made by an intermediary, as required by law.

RIGHT TO REQUEST RESTRICTIONS
You may have the right to request a restriction or limitation on the PHI we use or disclose about you for treatment, payment, or health care operations. You also have the right to request a limit on the PHI we disclose about you to someone who is involved in your care of the payment for your care, like a family member or friend. You may also request that a specific Mazzoni Center staff person, who is not directly involved in your care be restricted. For example, you could ask that we do not use or disclose information about a surgery you had. We are not required to agree to your request for a restriction and in some cases the restriction you request may not be permitted under law. If we do agree, we will comply with your request unless the information is needed to provide you with emergency treatment or comply with the law. Once we have agreed to the restriction, you have the right to revoke the restriction at any time. Under some circumstances we will also have the right to revoke the restriction as long as we notify you before doing so; in other cases, we will need your permission before we can revoke the restrictions. To request restrictions, you should request a “Record Restriction” form for your provider. Your request should be sent to the Compliance Department. We will accommodate all reasonable requests. Please specify in your request how or where you wish to be contacted. Right to copy of this notice You have the right to a paper copy of this notice. You may ask us to give you a copy of this notice at any time. For Part 2-protected records, you may request restrictions on certain uses and disclosures as permitted by law. Mazzoni Center will review and respond to restriction requests in accordance with applicable federal and state requirements.

RIGHT TO RECEIVE NOTIFICATION
You have the right to receive written notification from Mazzoni Center in the event of a breach of unsecured PHI, including unsecured substance use disorder records protected by 42 CFR Part 2, when notification is required by law.

FOR FURTHER INFORMATION; COMPLAINTS
If you have a question or wish to file a complaint related to the privacy of your PHI, please contact the Compliance Department at 267-360-5317 or by email at compliance@mazzonicenter.org or via our Feedback Forms on our website at www.mazzonicenter.org or contact us by mail at: Mazzoni Center– Compliance Department- 1348 Bainbridge St., Philadelphia, PA 19147. Additionally, you may also file a written complaint with the Office for Civil Rights of the U.S. Department of Health and Human Services located at 200 Independent Avenue, S.W., Washington, D.C. 20201 or email: OCRComplaint@hhs.gov

Effective Date of this Notice: Feb. 2026
Mazzoni Center will not retaliate against you for filing a complaint, including complaints related to 42 CFR Part 2. For privacy questions or complaints, you may contact the Compliance Department at 267-360-5317, via the Feedback Forms on our website, or by email at compliance@mazzonicenter.org