(866) 277-2080

Advocate Support Services

Notice of Privacy Practices

HIPAA and Applicable Federal and Maryland Confidentiality Requirements

Your Information. Your Rights. Our Responsibilities.

This Notice explains how Advocate may use and disclose your health information, your rights regarding that information, and Advocate’s privacy responsibilities. Please review it carefully.

Document ID: ADV-GOV-WEB-004 Version: 1.0 Effective Date: August 13, 2026 Classification: Public

Who This Notice Applies To

This Notice applies to Advocate Support Services, Inc. (“Advocate”) and to members of Advocate’s workforce who create, receive, maintain, or transmit protected health information in connection with Advocate’s health care services and operations.

Your Privacy Rights - At a Glance

This Notice applies to Advocate Support Services, Inc. (“Advocate”) and to members of Advocate’s workforce who create, receive, maintain, or transmit protected health information in connection with Advocate’s health care services and
operations.

Access your records See or obtain an electronic or paper copy of health information we maintain about you. Request corrections Ask us to amend information you believe is incorrect or incomplete.
Choose how we contact you Request reasonable confidential communications, such as a particular phone number or mailing address. Request limits Ask us to restrict certain uses or disclosures of your health information.
Receive an accounting Ask for a list of certain disclosures of your health information made during the applicable period. Get this notice Request a paper copy of this Notice at any time.
Use a representative Authorize a legally recognized personal representative to exercise your privacy rights. File a complaint Complain to Advocate or HHS if you believe your privacy rights have been violated, without retaliation.

Your Rights

Access your health information

You may ask to inspect or obtain an electronic or paper copy of your medical record and other health information
maintained in Advocate’s designated record set. We will respond within the time required by law and may charge only fees permitted by law.

Ask us to correct your health information

You may ask us to amend health information that you believe is incorrect or incomplete. We may deny a request in circumstances permitted by law, but if we do, we will explain the decision in writing and tell you about any further rights you may have.

Request confidential communications

You may ask Advocate to contact you in a specific way or at a specific location – for example, at a particular telephone number, email address, or mailing address. We will accommodate reasonable requests.

Ask us to limit what we use or share

You may ask us to restrict certain uses or disclosures for treatment, payment, or health care operations. We are not generally required to agree. If you pay in full out of pocket for a service and ask us not to disclose information about that service to your health plan for payment or health care operations, we will honor the request unless disclosure is required by law.

Receive an accounting of certain disclosures

You may ask for an accounting of certain disclosures of your health information made during the period allowed by law. The accounting does not include every type of disclosure. We will provide one accounting within a 12-month period without charge and may charge a reasonable, cost-based fee for additional requests as permitted by law.

Get a copy of this Notice

You may request a paper copy of this Notice at any time, even if you previously agreed to receive it electronically.

Choose someone to act for you

If a person has legal authority to act on your behalf, such as a guardian or other authorized personal representative, that person may exercise your privacy rights. Advocate may verify the person’s authority before acting on a request.

File a privacy complaint

You may complain to Advocate if you believe your privacy rights have been violated. You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights. Advocate will not retaliate against you for filing a complaint.

Your Choices

For certain uses or disclosures, you may tell us your preference. When the law gives you a choice and you communicate that choice to us, we will follow it as required by law.

• Sharing information with family members, close friends, or others involved in your care or payment for your care;
• Sharing information in a disaster-relief situation;
• Receiving fundraising communications, if Advocate conducts them using information permitted by law; and
• Other uses or disclosures for which the law requires your authorization.

Advocate will obtain your written authorization before using or disclosing your health information for purposes that require authorization, including most uses of psychotherapy notes, marketing that requires authorization, or the sale of protected health information. You may revoke an authorization in writing, except to the extent Advocate has already relied on it.

How We Typically Use and Share Health Information

Treatment

We may use and disclose your health information to provide, coordinate, or manage your services and to communicate with other health care professionals involved in your care, as permitted by law.

Payment

We may use and disclose your health information to obtain payment for services, including eligibility, authorization, billing, claims, utilization review, and related payment activities.

Health care operations

We may use and disclose your health information to operate Advocate, improve quality, supervise and train staff, conduct compliance and audit activities, manage risk, evaluate performance, obtain accreditation, and carry out other health care operations permitted by law.

Communications about your services

We may use contact information you provide to communicate with you about referrals, admissions, appointments, scheduling, service coordination, care-related follow-up, and administrative matters, subject to applicable law and your communication preferences.

Other Uses and Disclosures Permitted or Required by Law

We may use or disclose health information without your authorization when federal or state law permits or requires it and all applicable conditions are satisfied. Examples may include:

• Public health and safety activities, such as preventing disease, reporting certain adverse events, or reporting suspected
abuse or neglect when authorized or required by law;
• Preventing or reducing a serious and imminent threat to health or safety, consistent with applicable law and professional
standards;
• Health oversight, licensing, accreditation, audit, and regulatory activities authorized by law;
• Workers’ compensation and similar programs as authorized by law;
• Research when applicable legal and ethical requirements are met;
• Organ and tissue donation activities when applicable;
• Coroners, medical examiners, and funeral directors as permitted by law;
• Law enforcement and special government functions when the legal requirements for disclosure are satisfied;
• Judicial or administrative proceedings when disclosure is authorized or required by applicable law, court order,
subpoena, or other lawful process; and
• Disclosures required to the U.S. Department of Health and Human Services to demonstrate Advocate’s compliance with
federal privacy law.

Additional Protections for Behavioral Health and Substance Use Disorder Information

Maryland mental health records. Maryland law provides additional protections for records developed in connection with
mental health services. When such records may be disclosed without your authorization, Advocate will limit the disclosure
to information relevant to the legally permitted purpose and will comply with other applicable Maryland restrictions.

42 CFR Part 2 records. To the extent Advocate receives or maintains substance use disorder patient records that are protected by 42 CFR Part 2, those records receive additional federal confidentiality protections. Advocate will not use or
disclose Part 2 records in a civil, criminal, administrative, or legislative investigation or proceeding against you unless permitted by Part 2, including where there is your written consent or the required Part 2 court order and legal process.

If Part 2 information is used for fundraising communications, you will receive clear advance notice and a choice about
whether to receive those communications, as required by law.

Our Responsibilities

• Maintain the privacy and security of your protected health information;
• Provide you with this Notice describing our legal duties and privacy practices;
• Follow the terms of the Notice currently in effect;
• Notify you as required by law if a breach occurs that may have compromised the privacy or security of your information;
and
• Use or disclose your health information only as described in this Notice or as otherwise permitted or required by law.

Changes to This Notice

Advocate may change the terms of this Notice and may make the revised Notice effective for health information we already maintain as well as information we receive in the future. The current Notice will be available upon request, at Advocate service locations as required, and on Advocate’s website.

Questions or Complaints

Advocate Privacy Officer U.S. Department of Health and Human Services
Office for Civil Rights

Advocate Support Services, Inc.
700 Melvin Avenue, Suite 9
Annapolis, Maryland 21401

Phone: (866) 277-2080
Email: info@advocatesupport.com

200 Independence Avenue, S.W.
Washington, D.C. 20201

Phone: 1-877-696-6775
Complaints may also be filed through the HHS
Office for Civil Rights complaint process.

Advocate will not retaliate against you for asking a privacy question, exercising a privacy right, or filing a complaint.