HIPAA Privacy Notice

1. What Is Protected Health Information (PHI)?

PHI is any individually identifiable health information that we create, receive, maintain, or transmit in connection with the provision of drug screening or lab services. This includes, but is not limited to:

• fiber_manual_recordYour name, date of birth, and student identification number
• fiber_manual_recordDrug screening test results and specimen data
• fiber_manual_recordDates of service and campus location
• fiber_manual_recordEmail address and phone number collected during booking

2. How We Use Your PHI

We use your PHI only for the following purposes:

3. Disclosures of Your PHI

We will not sell or share your PHI without your written authorization, except in the following limited circumstances permitted or required by law:

• fiber_manual_recordAs required by federal, state, or local law
• fiber_manual_recordTo avert a serious threat to public health or safety
• fiber_manual_recordFor oversight of our HIPAA compliance (e.g., HHS Office for Civil Rights audits)
• fiber_manual_recordTo business associates who provide services on our behalf, subject to a signed Business Associate Agreement (BAA)

4. Your Rights Regarding Your PHI

Under HIPAA, you have the following rights with respect to your PHI:

To exercise any of these rights, contact our Privacy Officer using the information in Section 6 below. We will respond within 30 days.

5. How We Protect Your PHI

We implement administrative, physical, and technical safeguards to protect your PHI from unauthorized access, use, or disclosure, including:

• checkEncryption of PHI at rest and in transit
• checkAccess controls limiting PHI access to authorized personnel only
• checkTime-limited secure links for result delivery (links expire after 60 minutes)
• checkStaff training on HIPAA Privacy and Security Rules
• checkSecure chain-of-custody documentation for all specimens

6. Contact Our Privacy Officer

For questions about this Notice, to exercise your HIPAA rights, or to report a privacy concern, contact:

You also have the right to file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights at www.hhs.gov/ocr/privacy/hipaa/complaints if you believe your privacy rights have been violated. We will not retaliate against you for filing a complaint.