ROYCE RX™
Notice of Privacy Practices

Last updated: September 1, 2024

tHIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
I. Who We Are

This Notice of Privacy Practices (“Notice”) describes the privacy practices of ROYCE RX and its affiliates, including certain affiliated professional entities, their physicians, healthcare practitioners, and other personnel (“we” or “us”).

II. Our Privacy Obligations

We are required by law to maintain the privacy of your health information (“Protected Health Information” or “PHI”) and to provide you with this Notice of our legal duties and privacy practices with respect to your PHI. We are also obligated to notify you following a Breach of unsecured PHI. When we use or disclose your PHI, we are required to abide by the terms of this Notice (or other notices in effect at the time of the use or disclosure).

III. Permissible Uses and Disclosures Without Your Written Authorization

In certain situations, which we describe in Section IV below, we must obtain your written authorization in order to use and/or disclose your PHI. However, for the following uses and disclosures, we do not need any type of authorization:

  • A. Uses and Disclosures for Treatment, Payment, and Healthcare Operations.

    We may use and disclose your PHI, but not your "Highly Confidential Information" (defined in Section IV.B below), for treatment, payment, and healthcare operations, as detailed below:

    • Treatment: We may use and disclose your PHI to provide treatment, such as diagnosing and treating your illness. We may also disclose PHI to other healthcare providers involved in your treatment.

    • Payment: We may use and disclose your PHI to obtain payment for the services we provide to you.

    • Healthcare Operations: We may use and disclose your PHI for healthcare operations, such as internal administration, planning, and quality assessment activities.

  • B. Disclosures to Relatives, Close Friends, and Other Caregivers.

    We may disclose your PHI to family members, friends, or other persons involved in your care, provided we have your agreement or if we reasonably infer that you do not object.

  • C. Public Health Activities.

    We may disclose your PHI to public health authorities to report health information for the purposes of preventing or controlling disease, injury, or disability.

  • D. Victims of Abuse, Neglect, or Domestic Violence.

    We may disclose your PHI to authorized government authorities if we believe you are a victim of abuse, neglect, or domestic violence.

  • E. Health Oversight Activities.

    We may disclose your PHI to health oversight agencies responsible for ensuring compliance with healthcare regulations.

  • F. Judicial and Administrative Proceedings.

    We may disclose your PHI in response to a court order or other lawful process.

  • G. Law Enforcement Officers.

    We may disclose your PHI to law enforcement officials as required or permitted by law.

  • H. Decedents.

    We may disclose your PHI to coroners, medical examiners, or funeral directors to help them carry out their duties.

  • I. Research.

    We may use or disclose your PHI for research purposes if an Institutional Review Board or Privacy Board approves a waiver of authorization for disclosure.

  • J. Health or Safety.

    We may use or disclose your PHI to prevent or lessen a serious and imminent threat to a person’s or the public’s health or safety.

  • K. Specialized Government Functions.

    We may disclose your PHI to government units with special functions, such as the military or the Department of State.

  • L. Workers’ Compensation.

    We may disclose your PHI as necessary to comply with state workers’ compensation laws.

  • M. As Required by Law.

    We may use and disclose your PHI when required by law.

IV. Uses and Disclosures Requiring Your Written Authorization
  • A. Use or Disclosure with Your Authorization.

    We must obtain your written authorization for uses and disclosures of PHI for marketing purposes or disclosures that constitute the sale of PHI. Any uses not described in this Notice will be made only with your written authorization.

  • B. Uses and Disclosures of Highly Confidential Information.

    Special privacy protections apply to certain Highly Confidential Information, such as mental health services, HIV testing, and substance abuse treatment. We must have your written authorization to disclose this information, except in limited circumstances.

  • C. Revocation of Authorization.

    You may revoke your written authorization at any time by submitting a written statement to our Privacy Officer.

V. Your Rights Regarding Your Protected Health Information
  • A. For Further Information and Complaints.

    If you have concerns about your privacy rights or wish to file a complaint, you may contact our Compliance and Privacy Officer. You may also file a complaint with the U.S. Department of Health and Human Services.

  • B. Right to Request Additional Restrictions.

    You have the right to request restrictions on the use or disclosure of your PHI for treatment, payment, or healthcare operations.

  • C. Right to Receive Confidential Communications.

    You may request to receive your PHI by alternative means or at alternative locations.

  • D. Right to Inspect and Copy Your Health Information.

    You have the right to request access to your medical and billing records. If you request copies, we may charge a cost-based fee for labor, supplies, and postage.

  • E. Right to Amend Your Records.

    You may request that we amend your PHI. To request an amendment, please contact our Privacy Officer.

  • F. Right to Receive an Accounting of Disclosures.

    You may request an accounting of certain disclosures of your PHI made by us during the past six years.

  • G. Right to Receive a Copy of this Notice.

    You may request a copy of this Notice at any time.

VI. Effective Date and Duration of This Notice
  • A. Effective Date.

    This Notice is effective on September 1, 2024.

  • B. Right to Change Terms of This Notice.

    We reserve the right to change the terms of this Notice. The new terms will apply to all PHI we maintain, including any previously created or received. We will post the updated Notice on our website.

VII. Privacy Officer

You may contact the Privacy Officer at:
Email: privacy@roycerx.com