Joint Notice of Privacy Practices

This notice describes how your medical information may be used or disclosed, and how you may access this information. Please review it carefully.

Kandu’s Duties

We are required by law to maintain the privacy and security of your protected health information.

We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information.

We must follow the duties and privacy practices described in this notice and give you a copy.

We will not use or share your information other than as described here unless you give us written permission. You may also change your mind at any time by sending an email to [email protected] and letting us know that you are retracting a previous written permission to use or share your information.

Uses and Disclosures Without Your Written Authorization

Kandu is permitted by law to use and disclose your protected health information without the need for your written authorization for the following purposes:

Treatment generally means the provision, coordination, or management of health care and related services among health care providers or by a health care provider with a third party, consultation between health care providers regarding a patient, or the referral of a patient from one health care provider to another.

For example, a Kandu clinician may share an update on your current condition at the request of your Neurologist to coordinate treatment and improve health outcomes.

Payment encompasses the various activities of health care providers to obtain payment or be reimbursed for their services.

For example, If Kandu bills your health insurance, the insurance company may require documentation, including your health information, before they pay for those services.

Health Care Operations are administrative, financial, legal, and quality improvement activities of a covered entity that are necessary to run its business and to support the core functions of treatment and payment.

For example, Kandu may use your health information as part of business management and general administrative activities, including complying with legal requirements, providing customer service, resolving internal grievances, the sale or transfer of assets, creating de-identified data or a limited data set, review and publish aggregate quality data, and fundraising for the benefit of Kandu.

Unless you object, Kandu may share protected health information with family member(s) and/or caregiver(s) if:

They are involved in or are paying for your health care.
You have given us permission.
If, in their professional judgment, the Kandu clinician believes you do not object.

Kandu may also contact you to provide reminders or information about appointments, to-do items, medication, treatment, or other health-related services.

Other purposes

Kandu may also use or disclose your protected health information, without the need for written authorization, as permitted or required by state or federal law for the following:

To avoid a serious threat to your health or safety or the health or safety of others.
As required by state or federal law such as reporting abuse or neglect.
For public health activities such as reporting communicable diseases, problems with products or other adverse events.
For health oversight activities such as audits, investigations, or licensure actions.
In response to a court, administrative order, subpoena, or other legal process.
When requested by law enforcement, but only as authorized by law.
For research purposes if conditions are satisfied. All research projects are subject to a special approval process that evaluates a proposed research project and its use of health information to ensure appropriate safeguards. Please notify us at any time if you do not want to participate in research efforts.

Uses and Disclosures with Your Written Authorization

Other uses and disclosures will be made only with your written authorization; you may revoke prior authorization(s) in writing at any time.

Your Rights with Respect to Your Protected Health Information

Following is a brief description of the rights with respect to your protected health information, and how you may exercise these rights:

You have the right to request restrictions on uses and disclosures of protected health information. You may request that your health information not be shared with specific persons, groups, or companies. If you prefer not to let the health insurance company know about care you receive, there is the option to pay Kandu directly for care outside the plan. We aim to honor your requests but may decline if it interferes with your care or is not allowed by law.

You have the right to receive confidential communications of protected health information. Let Kandu know your preferred way (for example phone, email or texts) and place of being contacted.

You have the right to inspect and copy protected health information. You may request to see and/or have a copy of your medical record. Upon written request and agreeing to pay for the cost of copying and mailing, the record will be sent to you within 30 days.

You have the right to amend protected health information. Please ask to change any inaccurate information in your medical record or add information that is missing or incomplete. If it is verified, corrections will be made. If it cannot be verified, your disagreement will be noted in the file. In most cases, your file should be updated within 60 days.

You have the right to receive an accounting of disclosures of protected health information. Kandu will provide a list of those who have seen your health information (other than for treatment, payment of healthcare operations) within 60 days of receiving a written request.

You have the right to obtain a paper copy of this notice. Kandu will provide a paper copy of this notice upon written request.

Complaints. If you believe your rights are being denied or your health information is not being protected, you may choose to file a complaint. The law does not allow retaliation for filing a complaint or reporting in good faith a compliance concern.

You may report a concern or complaint at any time 24/7 by calling the Kandu Compliance Hotline at 844-787-9167 or by using the Kandu Compliance Reporting Portal at https://www.kanducompliancereporting.com/

You may also contact Ralph Oyaga, Kandu Corporate Compliance Officer by sending an email to [email protected]

You may also contact the Secretary of the U.S. Department of Health and Human Services, Office of Civil Rights (OCR) using the OCR Complaint Portal at https://www.hhs.gov/hipaa/filing-a-complaint/complaint-process/index.html

Revisions to this Notice. Kandu will promptly distribute any revisions to this notice whenever there is a material change to the uses or disclosures, your rights, Kandu’s legal duties, or other privacy practices stated in this notice. Except when required by law, a material change to any term of this notice may not be implemented prior to the effective date of the revised notice in which such material change is reflected.

Effective Date:

This Notice of Privacy Practices is effective September 16, 2024.

If you have any questions or concerns, please contact us at:
[email protected]