Notice of Privacy Practices

Our Legal Duty

We are required by law to maintain the privacy and security of your protected health information ("PHI"), notify you of a breach that may have compromised the privacy or security of your PHI, and follow the terms of this Notice. KNWN Health Nursing Corporation may change this Notice at any time; the revised Notice will apply to all PHI we maintain. The current Notice is always available at knwnhealth.com.

How We May Use and Disclose Your PHI Without Your Authorization

Treatment

We may use and share your PHI with providers and clinical staff involved in your care to provide, coordinate, and manage your treatment and related healthcare services, including referrals to other providers where clinically appropriate.

Payment

We may use and share your PHI to bill for and collect payment for services rendered, including communicating with third-party payers where applicable, and verifying coverage or eligibility.

Healthcare Operations

We may use and share your PHI to operate KNWN Health Nursing Corporation, including quality assessment and improvement activities, training and supervision of clinical staff, licensing and accreditation activities, and business management functions.

Other Permitted Uses and Disclosures

As required or permitted by law, we may also use or disclose your PHI for the following purposes without your written authorization:

• Required by law: to comply with federal, state, or local law, including court orders, subpoenas, and administrative requests;
• Public health activities: reporting to public health authorities to prevent or control disease, injury, disability, or death;
• Abuse or neglect reporting: to report suspected abuse, neglect, or domestic violence to authorized government agencies;
• Health oversight activities: to government agencies conducting audits, inspections, licensure, or investigations;
• Judicial and administrative proceedings: in response to court orders, subpoenas, or other lawful process;
• Law enforcement: to law enforcement officials in limited circumstances as permitted by law;
• Serious threats: to prevent or lessen a serious and imminent threat to the health or safety of a person or the public;
• Workers' compensation: as authorized by and to the extent necessary to comply with applicable workers' compensation laws;
• Research: under certain conditions, including appropriate oversight and safeguards;
• Decedents: to coroners, medical examiners, and funeral directors as necessary to carry out their duties.

Uses and Disclosures Requiring Your Written Authorization

We will obtain your written authorization before using or disclosing your PHI for purposes not described in this Notice, including most uses for marketing, the sale of PHI, and the use or disclosure of medical notes. You may revoke an authorization at any time in writing; revocation is not retroactive.

Special Categories of PHI

Certain types of PHI receive additional protections under federal and state law. We will comply with applicable law before using or disclosing PHI related to: mental health and substance use disorder treatment records (including records covered by 42 CFR Part 2); HIV/AIDS status; genetic information; reproductive health information; and other specially protected categories under California law. Where California law provides greater protection than HIPAA, we follow the more protective standard.

Your Rights

You have the following rights with respect to your PHI. To exercise any of these rights, submit a written request to us using the contact information below.

Right to Access

You have the right to inspect and obtain a copy of your PHI in a designated record set. We will provide access within the time required by law. We may charge a reasonable, cost-based fee. If we deny access, we will explain the basis for denial and your right to have the denial reviewed.

Right to Amend

You may request that we amend PHI that you believe is incorrect or incomplete. We may deny your request in certain circumstances and will explain any denial in writing.

Right to an Accounting of Disclosures

You may request a list of disclosures we have made of your PHI for purposes other than treatment, payment, and healthcare operations, and other excepted purposes, for up to six years prior to your request.

Right to Request Restrictions

You may request restrictions on our use or disclosure of your PHI. We are not required to agree to all requests, except that we must agree to a restriction on disclosure to a health plan for a service you paid for entirely out of pocket.

Right to Confidential Communications

You may request that we communicate with you in a specific way or at a specific location. We will accommodate reasonable requests.

Right to a Paper Copy of This Notice

You may request a paper copy of this Notice at any time, even if you have agreed to receive it electronically.

Right to Receive Notice of Breach

You have the right to receive notification if there is a breach of your unsecured PHI, in accordance with applicable law.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights at www.hhs.gov/ocr. We will not retaliate against you for filing a complaint.

Contact — Privacy Officer

© 2026 KNWN Health Nursing Corporation. All rights reserved.