HIPAA Notice

1. Our role

WhiteLabelMD provides technology and administrative services to telehealth brands, provider groups, pharmacies, and labs. In most engagements WhiteLabelMD acts as a business associate under HIPAA, and the treating provider group or pharmacy is the covered entity responsible for its own notice of privacy practices.

2. Protected health information

Protected health information, or PHI, is individually identifiable health information created or received in connection with treatment, payment, or healthcare operations. This includes intake responses, clinical notes, prescriptions, lab results, and related billing records.

3. How PHI may be used and disclosed

PHI may be used or disclosed for the following purposes.

• Treatment: sharing information with prescribing providers, pharmacies, and labs to deliver care.
• Payment: processing charges, insurance where applicable, and collections.
• Healthcare operations: quality review, credentialing, compliance monitoring, and business management.
• As required by law: public health reporting, regulatory oversight, and lawful requests.

4. Safeguards

We maintain administrative, physical, and technical safeguards, including access controls, encryption in transit and at rest, audit logging, workforce training, and executed business associate agreements with subcontractors that handle PHI.

5. Your rights

Individuals generally have the following rights regarding their PHI.

• Request access to and copies of records.
• Request an amendment to records believed to be inaccurate.
• Request an accounting of certain disclosures.
• Request restrictions on certain uses and disclosures.
• Request confidential communications through an alternate means or location.
• File a complaint without fear of retaliation.

6. Breach notification

If unsecured PHI is breached, affected individuals and the applicable covered entity will be notified in accordance with the HIPAA Breach Notification Rule.

7. How to exercise your rights

Direct requests to the treating provider group or pharmacy identified in your care records. You may also contact WhiteLabelMD and we will route the request to the responsible covered entity. You may file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights.