THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

The ordering physicians and Quest Diagnostics who are associated with 365 Health Fairs (collectively “Health Fair Providers” in this Notice) are committed to protecting the privacy of your personal and health information. This protected health information (PHI) includes test results and other patient identifiable information that we collect or create as part of offering testing at the 365 Health Fairs.

We urge you to read this Joint Notice of Privacy Practices carefully so that you will understand both our commitment to the privacy of your PHI, and how you can participate in that commitment. Should you have any questions about this Notice or our privacy practices, please call us at: (800) 849-7321 x6703 or write to us at the following address:
Quest Diagnostics Incorporated
Attn: Health Fair Program – Privacy Officer
695 South Broadway Denver, CO 80209

Health Fair Providers Privacy Policy
Health Fair Providers and our employees are committed to obtaining, maintaining, using and disclosing PHI in a manner that protects patient privacy. We will only use or disclose the minimum amount of your PHI we consider necessary to perform a job or complete an activity. This Notice applies to all PHI that we use, maintain or share between us associated with health fairs offered by 365 Health Fair.

If the ordering physicians or Quest Diagnostics are providing services to you separate and apart from such health fairs, these persons or companies may have different Notices regarding their use and disclosure of your PHI created in their offices. Health Fair Providers are sharing PHI in jointly providing health fair services to you, however, they are separate legal entities and are not responsible for the medical or professional judgments of the other.

Health Fair Providers are required by law to provide you with this Joint Notice of Privacy Practices with respect to PHI, to maintain the privacy of PHI, to state the uses and disclosures of PHI that Health Fair Providers may make, and to list your rights and our legal duties with respect to your PHI.

• Your PHI at Health Fair Providers includes personal and medical information (such as your name, address, date of birth, test ordered, etc.) that we obtain from you or other sources.
• Your PHI also includes the laboratory testing results that we create. An example of PHI is as follows: Jane Smith, Date of Birth: 2/15/68, resides at 123 Main Street, Anytown, NJ, cholesterol result of 215 mg/dL.

Health Fair Providers are required to abide by the terms of the Joint Notice of Privacy Practices currently in effect.

How We May Use and Disclose Your Protected Health Information

Your PHI will be used or disclosed for treatment, payment, or healthcare operations purposes and for other purposes permitted or required by law. Not every use or disclosure is listed; however, all of the ways we use or disclose your PHI will fall into one of the categories listed below.

If we wanted to use or disclose your PHI for other purposes, we would have to obtain your written authorization. You have the right to revoke your authorization at any time, except if we have already made a disclosure based on that authorization. We do not need your authorization or permission to use or disclose your PHI for the following purposes:
For Treatment – As a health care provider that provides laboratory testing for ordering physicians, Quest Diagnostics uses your PHI as part of our testing process and discloses your PHI to ordering physicians and other authorized health care professionals who need access to your laboratory results to treat you. In addition to your ordering physician, we may provide a specialist consulting physician with information about your results to further validate the results before release to your physician. Occasionally, we may contact you to arrange for a redraw of your specimens.
For Payment – We will use your PHI in our billing departments and disclose your PHI to 365 Health Fair for payment purposes, or to third parties to assist us in creating bills, claim forms, or getting paid for our services. In some cases, we may have to contact you to obtain billing information or for other billing purposes.
For Healthcare Operations – We may use or disclose your PHI in the course of activities necessary to support our health care operations, such as performing quality checks on our testing, for teaching purposes, or for developing normal reference ranges for tests that we perform.
Disclosures to Business Associates – Health Fair Providers may disclose your PHI to other companies or individuals, including 365 Health Fair, who need your PHI in order to provide specific services to us. These other entities, known as “business associates,” must maintain the privacy and security of PHI. Our business associates must only use your PHI for designated treatment, payment, or health care operations purposes that they perform on our behalf. If 365 Health Fair instructs us to further disclose your PHI to its business associates, then 365 Health Fair shall enter into a contract with those entities to require that they also maintain the privacy and security of your PHI. As Permitted or Required by Law – We may use or disclose your PHI for various public policy purposes that are authorized or required by federal or state law. For example, we are required to disclose your PHI to the Secretary of the U.S. Department of Health and Human Services (“HHS”) upon request. We must provide you with copies of your PHI at your request, except where restricted or prohibited by state law.
Public Safety – When the appropriate conditions apply, we may use or disclose PHI to prevent or lessen a serious and imminent threat to the health or safety of a person or the public.
To Avert a Serious Threat to Health or Safety – We may use or disclose your PHI when necessary to prevent a serious threat to your health and safety or that of another person or the general public. Any use or disclosure for this purpose would only be made to someone able to help prevent the threat. For example, we may disclose your PHI in an investigation regarding the licensing of healthcare providers.
Health Oversight – We may disclose your PHI in connection with governmental oversight, licensure, auditing, and other purposes. For example, governmental agencies periodically review our records to ensure that Health Fair Providers are complying with the rules of various regulatory and licensing agencies. HHS and State Health Departments are examples of agencies that oversee aspects of Health Fair Providers’ operations. Other agencies may audit our billing and laboratory records to verify that the services were provided as claimed.
Judicial and Administrative Proceedings – We may disclose your PHI as required to comply with court orders, discovery requests or other legal process in the course of a judicial or administrative proceeding.
Law Enforcement – We may also disclose PHI for law enforcement purposes. For example, we may be required to release PHI as required by law or in compliance with a court order, warrant, investigative demand or similar legal process. We may provide your PHI in response to a subpoena, discovery request or other legal process in the course of an administrative or judicial proceeding, but only if efforts have been made to tell you about the request or to obtain an order of protection for the requested information. We may release PHI for other law enforcement purposes, such as to identify or locate a suspect, fugitive, material witness, or missing person. Specialized Government Functions – We may disclose your PHI for military and veterans activities, national security or intelligence purposes, or to correctional institutions, or to law enforcement officials having custody of an inmate.
Research – We may disclose health information for research purposes when an Institutional Review Board or privacy board has reviewed the research proposal and established protocols to ensure the privacy of your PHI and determined that the researcher does not need to obtain your authorization prior to using your PHI for research purposes. We may also disclose information about decedents to researchers under certain circumstances.
Note Regarding State Law – For all of the above purposes, in cases where state law is more restrictive than federal law, we are required to follow the more restrictive state law. 2 3 4
Fundraising – 365 Health Fair may use your PHI to communicate with you to raise funds to support health fair services and educational programs it provides to the community. You may opt out of receiving such communications by contacting 365 Health Fair at (303) 698-4455 or 1139 Delaware, Denver, CO 80204.

Your Rights Concerning Privacy and Confidentiality
Access – You or your authorized or designated personal representative has the right to inspect and copy your PHI. Health Fair Providers will deny access to certain information for specific reasons, for example, where state law prohibits such patient access. If your request is denied, you may request that the denial be reviewed.
Amendments – You have the right to request amendments to your PHI (but we are not required to make the requested amendments). If we deny your written request to change your PHI we will provide you with a written explanation of the reason for the denial and additional information regarding further actions that you may take.
Accounting – You have the right to receive an accounting of disclosures of your PHI that were made by Health Fair Providers for a period of up to six years prior to the date of your written request. Under the law, this accounting does not include disclosures made for purposes of treatment, payment, health care operations, or certain other excluded purposes, but includes other types of disclosures, including disclosures for public health reporting or in response to a court order.
Restrictions – You have the right to ask us if we will agree to restrictions on certain uses and disclosures of your PHI, but we are not required to agree to your request.
Confidential Communications – We may contact you by phone or by mail based on information you provide to us. You have the right to request that we send your PHI by alternate means or to an alternate address and we will accommodate reasonable requests.
Joint Notice of Privacy Practices – A copy of our current Joint Notice will be posted in the participant registration area at the health fair. You have the right to request a paper copy of this Joint Notice.
Complaints – If you believe your privacy rights have been violated, you have the right to register a complaint with Health Fair Providers or the Secretary of the U.S. Department of Health and Human Services. Health Fair Providers will not retaliate against any individual for filing a complaint. You may file a complaint by calling us or by writing to us at the address indicated in this Joint Notice.
How to Exercise Your Rights – Write to us with your specific written request and be sure to include sufficient information for us to identify all of your records. You may also contact us at the toll-free telephone number below to request an access form. Health Fair Providers will consider your request and provide you a response within a reasonable timeframe. For additional details, or for instructions regarding how to exercise these rights, call us at the number indicated below.

You may request a copy of this Joint Notice by calling (800) 849-7321, extension 6703

How To Contact Us – If you have questions or concerns regarding the privacy or confidentiality of your PHI, or you wish to register a complaint, please write us at the address located at the beginning of this notice or contact:
Quest Diagnostics, Health Fair Program – Privacy Officer: (800) 849-7321, x6703

Note: Health Fair Providers reserves the right to amend this Joint Notice of Privacy Practices, at any time, to reflect changes in our privacy practices, and to make these changes applicable to and effective for all PHI that we maintain, including PHI that we created or received prior to the effective date of the Joint Notice revision. Revised February, 2013