HIPAA Notice of Privacy Practices

1. Purpose of This Notice

This Notice of Privacy Practices (“Notice”) explains in detail how Health Network Continuum, Inc. (“HNC”) may use, disclose, and safeguard your protected health information (“PHI”) in accordance with the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), the HIPAA Privacy Rule, the HIPAA Security Rule, and other applicable federal and state regulations. PHI includes any information that identifies you and relates to your past, present, or future physical or mental health, the provision of healthcare, or payment for healthcare services.

This Notice is intended to help you understand your rights regarding your PHI, how your information may be shared to support your care, and the responsibilities HNC has when handling PHI on behalf of healthcare providers and organizations. While HNC does not provide medical care directly, our technology platforms support the delivery of TeleHealth, remote patient monitoring, and related services, which may involve the processing of PHI. This Notice outlines the privacy practices that apply whenever PHI is handled through our systems.

2. Our Role

HNC provides secure technology platforms that enable healthcare providers, health plans, and authorized organizations to deliver TeleHealth services, monitor patient health remotely, and manage clinical workflows. In performing these functions, HNC may receive, store, transmit, or process PHI on behalf of these entities. Under HIPAA, HNC typically acts as a “business associate,” meaning we handle PHI only as permitted by the covered entity and only for the purposes necessary to support their healthcare operations.

As a business associate, HNC enters into Business Associate Agreements (“BAAs”) with covered entities that define our responsibilities, limitations, and obligations regarding PHI. These agreements require HNC to implement appropriate safeguards, follow strict privacy and security standards, and use PHI only as instructed by the covered entity. HNC does not use PHI for independent purposes, nor do we sell or share PHI for marketing or unrelated commercial activities.

3. How We May Use and Disclose PHI

Subject to applicable agreements and law, HNC may use and disclose PHI in limited ways that support the healthcare services provided by covered entities. These uses and disclosures are permitted only to the extent necessary to fulfill our contractual obligations and comply with HIPAA. Examples include:

• Treatment: Facilitating communication and data exchange between healthcare providers, enabling remote patient monitoring, and supporting clinical decision-making by ensuring providers have timely access to relevant health information.
• Payment: Assisting healthcare providers and health plans with billing, claims processing, eligibility verification, and other payment-related activities when such functions are supported by our platform and authorized by the covered entity.
• Healthcare Operations: Supporting quality improvement initiatives, analytics, reporting, auditing, training, and administrative functions that help covered entities manage their operations and improve patient care. This may include system performance monitoring, troubleshooting, and platform optimization.
• As Required by Law: Disclosing PHI when mandated by federal, state, or local laws, court orders, subpoenas, investigations, or regulatory requirements. Such disclosures are made only to the extent necessary and in compliance with applicable legal standards.

HNC does not use PHI for marketing, advertising, or unrelated commercial purposes, and we do not disclose PHI to third parties except as permitted by HIPAA or authorized by the covered entity.

4. Other Uses and Disclosures

Any uses or disclosures of PHI not specifically described in this Notice or permitted under HIPAA will require your explicit written authorization. Examples may include sharing PHI for research purposes, releasing information to non‑healthcare organizations, or using PHI for purposes unrelated to treatment, payment, or healthcare operations.

You may revoke your authorization at any time in writing, except to the extent that PHI has already been used or disclosed based on your prior authorization. Revoking authorization does not affect disclosures that were legally permitted without authorization.

5. Your Rights

Depending on your relationship with your healthcare provider and applicable law, you may have important rights regarding your PHI. These rights are typically exercised through your healthcare provider, who maintains the official medical record. Your rights may include:

• The right to access and obtain a copy of certain PHI: You may request copies of your health information in paper or electronic format, subject to reasonable fees and legal limitations.
• The right to request corrections: If you believe your PHI is incomplete or inaccurate, you may request an amendment. Your provider will review the request and determine whether a correction is appropriate.
• The right to request restrictions: You may ask your provider to limit certain uses or disclosures of your PHI. While providers are not always required to agree, they must honor certain restrictions when legally mandated.
• The right to request confidential communications: You may request that communications be sent to an alternative address or phone number to protect your privacy.
• The right to receive an accounting of disclosures: You may request a list of certain disclosures of your PHI made by your provider or their business associates, excluding those made for treatment, payment, or healthcare operations.

Because HNC acts as a business associate, we typically do not respond directly to patient requests. Instead, we support covered entities in fulfilling these requests by providing necessary information or technical assistance.

6. Safeguards

HNC maintains robust administrative, technical, and physical safeguards designed to protect PHI from unauthorized access, use, alteration, or disclosure. These safeguards include encryption of data in transit and at rest, access controls, authentication mechanisms, audit logging, intrusion detection, and continuous monitoring of system activity.

Our security program is aligned with industry best practices and HIPAA Security Rule requirements. We conduct regular risk assessments, vulnerability testing, employee training, and policy reviews to ensure that PHI is handled responsibly and securely. Only authorized personnel with a legitimate need to access PHI may do so, and all access is logged and monitored.

7. Breach Notification

If a breach of unsecured PHI occurs—meaning PHI is accessed, acquired, used, or disclosed in a manner not permitted by HIPAA—HNC will follow all applicable breach notification requirements. This may include notifying the affected covered entity, impacted individuals, and regulatory authorities, depending on the nature and scope of the breach.

Notifications will be provided without unreasonable delay and will include information about the breach, the types of PHI involved, steps individuals should take to protect themselves, and actions HNC is taking to mitigate harm and prevent future incidents.

8. Changes to This Notice

We may revise this Notice periodically to reflect changes in our privacy practices, regulatory requirements, or the functionality of our technology platforms. When updates are made, the “Last updated” date at the top of the Notice will be revised accordingly.

The revised Notice will apply to all PHI maintained by HNC at the time of the change and to any PHI received thereafter. We encourage you to review this Notice regularly to stay informed about how your information is protected.

9. Questions or Complaints

If you have questions about this Notice, our privacy practices, or how your PHI is handled, you may contact us using the information below. We are committed to addressing inquiries promptly and ensuring transparency in how PHI is managed.

Health Network Continuum, LLC.
10 East 40 Avenue, Suite 1055
New York, NY 10015
Email: info@healthnetworkcontinuum.com

You may also have the right to file a complaint with the U.S. Department of Health and Human Services if you believe your privacy rights have been violated. You will not be retaliated against for filing a complaint or exercising any of your rights under HIPAA.