HIPAA Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Our Legal Duty

Legacy Concierge is required by law to maintain the privacy of your Protected Health Information (PHI), to provide you with this notice, and to notify you following a breach of unsecured PHI under HIPAA §164.520 and the California Confidentiality of Medical Information Act (CMIA), Civil Code §56 et seq.

How We May Use and Disclose Your Health Information

Treatment

We may use and disclose PHI to provide, coordinate, or manage your care, including communication with other providers.

Payment

We may use and disclose PHI to obtain payment for services, including submitting claims to insurance companies or Medi-Cal.

Healthcare Operations

We may use PHI for quality assessment, training, licensing, and business management.

As Required by Law

We disclose PHI when required by federal or California law, including mandatory reporting obligations under California Health & Safety Code.

CA Mandatory Reporting

As a California-licensed HHA, we are required to report abuse, neglect, or exploitation of dependent adults or elders to Adult Protective Services under California Welfare & Institutions Code §15630.

Your Rights Regarding Your Health Information

• Right to Access: Inspect and obtain a copy of your PHI, including an electronic copy under California law.
• Right to Amend: Request amendment of PHI you believe is incorrect or incomplete.
• Right to an Accounting: Request an accounting of certain disclosures we have made of your PHI.
• Right to Restrict: Request restrictions on how we use or disclose your PHI.
• Right to Confidential Communications: Request we communicate with you in a specific way or at a specific location.
• Right to a Paper Copy: Receive a paper copy of this notice at any time, free of charge.
• California CMIA Rights: Under Civil Code §56.10, you have additional rights to restrict disclosure of your medical information beyond HIPAA requirements.

Complaints

If you believe your privacy rights have been violated, contact: Head of HR, compliance@legacyconcierge.com, (310) 974-4517. You may also file a complaint with the U.S. Secretary of Health and Human Services or the California Attorney General's Office. You will not be retaliated against for filing a complaint.

Effective Date: May 14, 2026