This Notice of Privacy Practices is provided to you as a requirement of the Health Insurance Portability and Accountability Act (HIPAA). It describes how CareContinuum may use or disclose your protected health information, with whom that information may be shared, and the safeguards we have in place to protect it. Protected health information includes individually identifiable information which relates to your past, present or future physical or mental health, treatment or payment for health care services. This notice also describes your rights to access and amend your protected health information. You have the right to approve or refuse the release of specific information outside of our system except when the release is required or authorized by law or regulation.

CARECONTINUUM'S DUTIES TO YOU REGARDING PROTECTED HEALTH INFORMATION:

All CareContinuum employees, staff and personnel are subject to the terms of this notice. We understand that medical information about you and your health is personal. We are committed to protecting medical information about you. We are required by law to do the following:

• Make sure that your protected health information is kept private.
• Give you this notice of our legal duties and privacy practices related the use and disclosure of your protected health information.
• Follow the terms of the notice currently in effect.
• Communicate any changes in the notice to you.

HOW WE MAY USE OR DISCLOSE YOUR PROTECTED HEALTH INFORMATION:

The following categories describe different ways that we use and disclose medical information. For each category of uses or disclosure, examples will be listed. The examples are not an all-inclusive list, however all of the ways we are permitted to use and disclose information will fall within one of the categories.

For Treatment: We will use and disclose medical information about you to provide, coordinate, or manage your health care and any related services. This includes the coordination or management of your health care with a third party. For example, we would disclose your protected health information to a health care provider, physician and/or pharmacy, who at the request of your physician, becomes involved in your care by providing assistance with your health care diagnosis or treatment. This includes pharmacists who may be provided information on other drugs you have been prescribed to identify potential interactions. In emergencies, we will use and disclose your protected health information to provide the treatment you require.

Payment: Your protected health information will be used, as needed, to obtain payment for your health care services. This may included certain activities such as determining eligibility or coverage for benefits, reviewing services provided to you for medical necessity, and undertaking utilization review activities.

Health Care Operations: We may use or disclose, as needed, your protected health information to support the daily activities related to health care. These activities include, but are not limited to quality assessment activities, investigations, oversight or staff performance reviews, licensing, and conducting or arranging for other health care related activities. We may share your protected health information with third party "business associates" who perform various activities (for example accreditation organizations) for CareContinuum. The business associates will also be required to protect your health information.

Required by Law: We may use or disclose your protected health information if law or regulation requires the use or disclosure.

Public Health:
We may disclose your protected health information to a public health authority who is permitted by law to collect or receive the information. The disclosure may be necessary to do the following:

• Prevent or control disease, injury, or disability
• Report births and deaths
• Report child abuse or neglect
• Notify a person who may have been exposed to a disease or may be at risk for contracting or spreading a disease or condition
• Notify the appropriate government authority if we believe a patient has been the victim of abuse, neglect, or domestic violence.

Health Oversight:
We may disclose protected health information to a health oversight agency for activities authorized by law, such as audits, investigations, and inspections. These health oversight agencies might include government agencies that oversee the health care system, government benefit programs, other government regulatory programs, and civil rights laws.

Food and Drug Administration:
We may disclose your protected health information to a person or company required by the Food and Drug Administration to do the following:

• Report adverse events, product defects, or problems and biologic product deviations.
• Track products.
• Enable product recalls
• Make repairs or replacements.

Legal Proceedings:
We may disclose protected health information during any judicial or administrative proceeding, in response to a court order or administrative tribunal (if such a disclosure is expressly authorized), and in certain conditions in response to a subpoena, discovery request, or other lawful process.

Law Enforcement:
We may disclose protected health information for law enforcement purposes, including the following:

• Responses to legal proceedings
• Information requests for identification and location
• Circumstances pertaining to victims of a crime
• Deaths suspected from criminal conduct
• Medical emergencies believed to result from criminal conduct

Serious Threat to Health or Safety:
We may disclose protected health information to avert a serious threat to someone's health or safety. We may also disclose protected health information to federal, state, or local agencies engaged in disaster relief as well as to private disaster relief or disaster assistance agencies to allow such entities to carry out their responsibilities in specific disaster situations.

Workers' Compensation:
We may disclose your protected health information to comply with workers' compensation laws and other similar legally established programs.

Inmates:
We may use or disclose your protected health information if you are an inmate of a correctional facility and the disclosure is necessary:
   1. For the institution to provide you with health care
   2. For your safety or the health and safety of others
   3. For the safety and security of the correctional institution.

Parental Access:
Some state laws concerning minors permit or require disclosure of protected health information to parents, guardians, and persons acting in a similar legal status. We will act consistently with the law of the state where the treatment is provided and will make disclosures following such laws.

Other Uses of Protected Health Information:
Other uses and disclosures of protected health information not covered by this notice and permitted by the laws that apply to us will be made only with your written authorization or that of your legal representative. If we are authorized to use or disclose protected health information about you, you or your legal representative have the right to revoke that authorization, in writing, at any time. You should understand that we cannot take back any disclosure that occurred prior to the revocation of the authorization.

YOUR RIGHTS REGARDING YOUR HEALTH INFORMATION

You may exercise the following rights by submitting a written request to:

CuraScript
Attn: Corporate Compliance Officer
6272 Lee Vista Blvd.
Orlando, Fl. 32822

Please be aware that CareContinuum may deny your request; however you may seek a review of the denial.

Right to Inspect and Copy:
You may inspect and obtain a copy of your protected health information that is contained in a "designated record set" for as long as we maintain the protected health information. A designated record set contains medical and billing records and any other records that CareContinuum uses to for making decisions about you.

This right does not include inspection and copying of the following records: psychotherapy notes; information compiled in reasonable anticipation of, or use in, a civil, criminal, or administrative action or proceeding; and protected health information that is subject to law that prohibits access to protected health information.

Right to Request Restrictions:
You may ask us not to use or disclose any part of your protected health information for treatment, payment, or health care operations. Your request must be made in writing to the CareContinuum Corporate Compliance Officer. In your request you must tell us:
  1. What information you want restricted
  2. Whether you want to limit our use, disclosure, or both
  3. To whom you want the restriction to apply
  4. An expiration date.

If CareContinuum believes that the restrictions are not in the best interest of either party or CareContinuum cannot reasonably accommodate the request, we are not required to agree. If the restriction is mutually agreed upon, we will not use or disclose your protected health information in violation of that restriction, unless it is needed to provide emergency treatment. You may revoke a previously agreed upon restriction, at any time, in writing.

Right to Request Confidential Communications:
You may request that we communicate with you using alternative means or at an alternative location. We will not ask you the reason for your request. We will accommodate reasonable requests when possible.

Right to an Accounting of Disclosures:
You may request that we provide you with an accounting of the disclosures we have made of your protected health information. This right applies to disclosures made for purposes other than treatment, payment, or health care operations as described in this Notice of Privacy Practices. The disclosure must have been made after April 14, 2003, and no more than 6 years from the date of request. This right excludes disclosures made to you, to family members or friends involved in your care, or for notification. The right to receive this information is subject to additional exceptions, restrictions, and limitations as described earlier in this notice.

Right to Obtain a Copy of This Notice:
You may obtain a paper copy of this notice from the CareContinuum website at www.carecontinuum.com or by requesting one in writing at the following address:

CareContinuum
Attn: Notice of Privacy
500 S. Hurstbourne Parkway
Louisville, KY 40222

Complaints:
You may contact the CareContinuum Compliance Officer in writing if you believe your privacy rights have been violated or you may contact the Department of Health and Human Services at the following address:

CuraScript
Attn: Corporate Compliance Officer
6272 Lee Vista Blvd.
Orlando, Fl. 32822

Office for Civil Rights
U.S. Department of Health and Human Services
200 Independence Avenue, S.W.
Room 509F, HHH Building
Washington, D.C. 20201

No retaliation will occur against you for filing a complaint.

FEDERAL LAWS:
This Notice of Privacy Practices is provided to you as a requirement of the Health Insurance Portability and Accountability Act (HIPAA). There are several other privacy laws that also apply including the Freedom of Information Act, the Privacy Act and the Alcohol, Drug Abuse, and Mental Health Administration Reorganization Act. These laws have not been superseded and have been taken into consideration in developing our policies and this notice of how we will use and disclose your protected health information.

CHANGES TO THIS NOTICE:
We reserve the right to change this notice. Its effective date is at the top of the first page. We reserve the right to make the revised or changed notice effective for medical information we already have about you as well as any information we receive in the future. We will post the current Notice in effect on our website www.carecontinuum.com