Bioreach Notice of Privacy Practices

Bioreach Laboratories is committed to protecting the confidentiality of your medical and health information (protected health information), as described in this notice, and maintains the privacy of your protected health information as required by law. We have provided this notice to describe our privacy practices relating to protected health information, including how we may use your protected health information within Bioreach and how, under certain circumstances, we may disclose it to others outside Bioreach. This notice also describes the rights you have concerning your protected health information. Please review carefully, and if you have questions about any part of this privacy notice, or if you want more information about Bioreach’s privacy practices, please contact the privacy officer listed at the end of this notice. 

Uses and Disclosures of Protected Health Information Permitted by Law

The law permits Bioreach to use your protected health information for treatment, billing of services, and healthcare operations, as explained below. Certain types of protected health information have additional protection under state or federal law. 

Your protected health information may be used and disclosed only for the following purposes

For treatment: We may disclose your protected health information to others who need information to treat you, such as doctors, physician assistants, nurses, medical and nursing students, technicians, and others involved in your care. For example, we will allow your ordering physician to have access to your laboratory results to assist in your treatment and for follow-up care. 

For healthcare operations: We may use and disclose your protected health information for healthcare operations, which include patient and internal education, administration, planning, and other various activities that improve the quality of care we provide to patients. We may disclose protected health information to outside companies to support administrative functions, such as data analysis or accounting or legal services, but we will only do so after they have signed an agreement stating that they will abide by our privacy policy. 

To business associates: We may provide your protected health information to other companies or individuals that need the information to provide services for us. These other entities, known as business associates, are required to maintain the privacy and security of protected health information. For example, we may provide information to companies that assist us with billing of our services. To family members and others involved in your care: We may disclose your protected health information, unless prohibited by applicable federal or state law, to a family member, another relative, a person identified by you who is involved in your medical care, or someone who helps pay for your care. If you do not want us to disclose your protected health information to family members or others, please contact Bioreach’s privacy officer, as provided below. 

As required by law: Federal, state, or local laws sometimes require us to disclose protected health information. For instance, we are required to report child abuse or neglect and must provide certain information to law enforcement officials in domestic violence cases. We also are required to give information to the State Workers’ Compensation Program for work-related injuries. For public health activities: We may use and disclose certain protected health information for public health purposes, such as preventing or lessening a serious and/or imminent threat to an individual’s or the public’s health or safety. We may also report information to your employer as required under laws addressing work-related illness and injuries or workplace medical surveillance. For instance, a positive communicable disease test result may be reported to the state health department. For judicial proceedings: We may disclose your protected health information if we are ordered to do so by a court or if we receive a subpoena or a search warrant. 

For health oversight activities: We may disclose protected health information to a government agency that oversees Bioreach or its personnel, such as the The Commission on Office Laboratory Accreditation (COLA) and the FDA, to ensure compliance with state and federal laws. 

Uses and Disclosures with Your Authorization 

Bioreach cannot use your protected health information for anything other than the reasons mentioned above without your signed authorization: a written document signed by you giving us permission to use or disclose your protected health information for the purposes you specifically set forth. You may revoke your authorization at any time by delivering a written statement to Bioreach’s privacy officer (identified 

below). If you revoke your authorization, Bioreach will no longer use or disclose your protected health information as previously permitted in your written authorization document. However, your revocation

of authorization will not reverse the use or disclosure of your protected health information made while your authorization was in effect. 

Your Individual Rights 

Right to request your protected health information: You have the right to access your protected health information (laboratory testing). You must make the request for such protected health information in writing or by calling Bioreach at 888-987-3220. 

To request the forwarding of your protected health information to your healthcare provider, write to Bioreach’s privacy officer, as set forth below. 

Right to request amendment of protected health information you believe is erroneous or incomplete: If you examine your protected health information and believe that some of the information is wrong or incomplete, you may ask us to amend your record. We will comply with your request, unless we are not 

the originator of the information, believe that the information you request to be amended is accurate and complete, or special circumstances apply. To ask us to amend your protected health information, write to the Bioreach privacy officer. 

Right to receive an accounting of disclosures of your protected health information: You have the right to request a list of certain disclosures we make of your protected health information. Under the law, this does not include disclosures made for purposes of treatment, payment, or healthcare operations or certain other purposes. If you would like to receive such a list, write to Bioreach’s privacy officer. Right to request restrictions on how Bioreach will use or disclose your protected health information for treatment, payment, or healthcare operations: You have the right to request us not to make uses or disclosures of your protected health information to treat you, to seek payment for care, or to operate our laboratories. We will consider your requests carefully, but we are not required to agree to your requested restriction. If you want to request a restriction, submit your request in writing to Bioreach’s privacy officer and describe your request in detail. Bioreach’s privacy officer will reply within 30 days of receiving your request. 

Right to request special communications: You have the right to ask us to communicate your protected health information by alternative means of communication or at alternative locations. For example, you can ask us not to call your home, but to communicate with you only by mail. To make such a request, write to Bioreach’s privacy officer.

Right to receive a paper copy of this notice: If you have received this notice electronically, you have the right to a paper copy at any time. You may download or print a paper copy of the notice or call/ write to Bioreach’s privacy officer for a copy. 

Changes to This Notice 

From time to time, we may change our practices concerning how we use or disclose protected health information or how we will implement patient rights concerning such information. We reserve the right to change this notice and to make the provisions in our new notice effective for all protected health information we maintain. If we change these practices, we will publish a revised notice. 

Questions, Concerns or Complaints

If you have any questions about this notice or have further questions about how Bioreach may use and disclose your protected health information, please contact the privacy officer. We welcome your feedback regarding any problems or concerns you have with your privacy rights or how Bioreach uses or discloses your protected health information. 

Effective Date: Feb 15, 2024 

For Bioreach HIPAA compliance, contact: 

Daryl Blackwell, (ASCP)cm 

Privacy Officer 
Bioreach Laboratories 
12162 Business Park Dr. Ste 114 
Draper, UT 84020 

P: 888-987-3220 
E: hello@bioreach.com