Privacy Policy Dialysis At Home, Inc. has built its business on a foundation of communication, trust and integrity. Our values are evidenced in our commitment to protecting your personal and private health information. We want you to know that we protect the information that you have shared with us. We also want you to know that this information, along with the record of care you receive is ³protected health information.² This information is kept in a paper form such as your medical record and in an electronic form on a computer. We know that keeping your personal health information safe and private is extremely important to you. This document explains how we use and share your information within our company system, and outside our company system, in order to provide you with quality dialysis care and services. We will always tell you when we need to get your specific written permission to use or share your information. Dialysis At Home Information Practices The types of information we collect include: Information requested for client demographic information Health insurance information Personal health/medical history Information regarding your home environment as it relates to accommodating your dialysis treatment in your home Information from your physician regarding your plan of care and the history of your illness Information from your physician regarding your current treatment modality and regimen We protect the privacy of our current and former clients. Access to our client information is limited to employees who need the information to perform their individual job responsibilities. Except where prohibited by Massachusetts state or federal laws, Dialysis At Home, Inc. may legally use and share your protected health information for treatment, payment and healthcare operations. We do not need to ask for your specific permission to share these things in the situations that are explained below: Treatment Dialysis At Home, Inc. (DAH) will use and share your protected health information to provide and manage your dialysis care and related services. We will share information with other third parties, such as hospitals, home health agencies, visiting nurses, rehabilitation hospitals, ambulance companies, dialysis backup support facilities, other dialysis centers and equipment supply companies. We will also share information with those who treated you before you became a client of Dialysis At Home, Inc. and with those who may treat you in the future. Payment Dialysis At Home, Inc. will share your protected health information to bill and collect payment for your dialysis healthcare services. We will share your information with your insurance company or government agency and with our billing contractor. Healthcare Operations Dialysis At Home, Inc. will share your protected health information to facilitate its healthcare operations. This helps us operate efficiently and carry out our goal of providing the best possible care and services to help you meet your personal health goals. Examples of our healthcare operations include: Monitoring of quality care and clinical indicators, and making improvements where needed Providing qualified healthcare professionals and other personnel to do their jobs Reviewing medical records and technical records for accuracy and completeness Storing your protected health information on computers and in written clinical and technical logs as required by approved policies and procedures Managing and evaluating your health and medical information Getting in touch with you Dialysis At Home, Inc. may use your protected health information to contact you: At the address and telephone numbers you give to us, including leaving messages at the telephone numbers about scheduled treatments, appointments, medical-supply delivery and equipment maintenance, insurance questions and updates, billing or payment matters, assessment and lab results With information about patient-care issues, treatment choices and follow-up care instructions With other health-related information and benefits and services that may be of interest to you Use of your information without your specific permission: additional situations Dialysis At Home, Inc. (DAH) may legally use and share your information with others in the following situations without your specific permission: As required by state and federal law and regulation ESRD Network For Public Health activities and initiatives including reports to state public health and child-protection authorities With regard to elder victims of abuse and in some instances to disabled victims of abuse or neglect For health oversight activities For legal and administrative proceedings With regard to people who have died, to coroners, medical examiners and funeral directors For organ, eye or tissue donation at death To avert a serious threat to health or safety As authorized and as necessary to comply with workers' compensation laws Limits on sharing your information You may ask that sharing and disclosures be limited or not made to family, friends and others. DAH may share relevant protected health information about you with a family member or other person close to you if they are involved in your care or in payment for your care. DAH may use or share your protected health information to notify a family member or other responsible person about your location, general medical condition or death. If you are present and are able to make healthcare decisions, we will try to find out if you want us to share this information with your family members or others. In an emergency situation when you are not able to make your wishes known, we will use our best judgment to decide whether to share information or not. If we think it is in your best interest, we will share information on a need-to-know basis. When your specific written permission is required Massachusetts state and federal laws require that we obtain your written permission before using or disclosing your personal health information in the situations listed below: Sharing information regarding genetic testing Sharing information about HIV testing and results Sharing information from substance abuse rehabilitation or treatment programs Sharing information about treatment for sexually transmitted diseases Using and sharing information for research or research preparation Sharing information specifically described as "privileged"or sensitive In administrative or judicial proceedings, your written permission is required to release information related to such issues as, for example: domestic violence, sexual assault, confidential communications, and confidential details of counseling or psychotherapy. If you give written permission for your protected health information in the above categories to be used and shared, you may withdraw that permission, in writing, at any time, except to the extent that the health providers have already acted on it. YOUR RIGHTS WITH RESPECT TO YOUR PROTECTED HEALTH INFORMATION AND HOW TO EXERCISE YOUR RIGHTS 1. The Right to Ask for Limits on the Use and Sharing of Your Protected Health Information You have the right to ask for restrictions on the use and sharing of your protected health information for treatment, payment and healthcare operations. You can also ask for restrictions on using this information to notify you of scheduled appointments. DAH is not required to agree to your request. If we agree to your request we must put the restriction in writing and follow the restriction except in an emergency situation where you required treatment. You may not ask us to restrict uses and sharing of information that we are legally required to make. 2. The Right to Access Your Protected Health Information You have the right to ask that your protected health information be sent to you in different ways. DAH may request your address and telephone number. It is your responsibility to provide us with accurate information that will allow us to reach you and care for you. We can request that you inform DAH about any changes. We will agree to any reasonable request you make regarding communications with you about your protected health information, and we will not ask that you explain your request. DAH can ask you about how a bill payment will be handled, and which address a bill should be sent to. 3. The Right to Request a Copy of Your Health Information You have the right to look at and get a copy of your protected health information that DAH keeps regarding your treatment, services and billing. You must request this information in writing. DAH will respond within 30 days to your request. If you ask for a copy of your records, you will be charged a copy fee. If we deny your request, we will explain the reason for the denial in writing and tell you which rights (if any) you have to a review of the denial. If you ask for information that we do not have, but we know where you can access the information, we will tell you where to direct your request. 4. The Right to Change Your Protected Health Information You have the right to ask us to change your Protected Health Information related to your treatment and billing if you think that a mistake has been made or information is missing. You must request this change in writing and give us the reason for the request. We will respond within 60 days to your request. If we are not able to act on your request within 60 days, we will inform you of the date on which you can expect a response. We may deny your request. If we deny your request, we must give you a written statement with the reasons for the denial and what steps are available to you. If we grant the request, we will ask you to tell us who should receive the changes. You must agree to have us notify them of the changes, along with any others who received information before the changes were made, and who may have relied on the incorrect information to give you treatment. 5. The Right to Receive An Accounting When Your Protected Health Information Is Shared Without Your Written Permission You must make this request in writing. You may request this information for instances going as far back as six years. The listing you will be provided will include: The date on which the information was shared The name and address of the person who received your information A brief description of the information given A brief statement of why the information was shared Exceptions: Sharing your information for the purpose of treatment, payment or health care operations Sharing information if you signed an authorization form Sharing information with persons involved in your care and services Use of your information to communicate your health condition or changes in health condition Sharing information for national security or intelligence purposes, or with correctional institutions or law enforcement officials who may have custody of you Sharing of information that occurred before the date of this notice We have sixty days to respond to your request. We will notify you of our intention to extend the response time to your request by 30 days. We will explain the delay to you in writing and give you a new response date. Your first request for any record in a 12 month period is free. We will charge a fee for any other requests within that 12 -month period. We will notify you of the fee before we do any of the work. 6. The Right to Ask for a Paper Copy of This Notice of Information Dialysis At Home, Inc. is required by law to keep your protected health information private. DAH reserves the right to change its privacy practices and the terms of this Notice Of Information at any time. DAH reserves the right to make the new Notice effective for all the protected Health Information it maintains. Any updated Notice will be posted on our website and public-office areas for public viewing. You may request a copy our the current Privacy Notice at any time by calling 1-800-833-1220, or you may view it here on our website (http://www.dialysisathome.com/privacy.html). 7. How to Complain If You Think Your Privacy Rights Have Been Violated If you disagree with any action we have taken and you think that your privacy rights have been violated with regard to your protected health information, please speak with us as soon as possible. If you are unable to speak with us, you may have a family member or guardian contact us on your behalf. We want you to know that if you make a complaint, your care and services will not be affected in any way. We will continue to give you the best care possible and respect your privacy. You may file a complaint by calling 1-800-833-1220. Ask to speak with an RN Care Manager. You may also present a complaint in writing to the Secretary of the Department of Health and Human Services, 200 Independence Avenue, S.W., Washington, D.C. 20201, or e-mail them at HHS.Mail@hhs.gov. We will take no action against you if you file a complaint about our privacy policies and practices. Our Privacy Goal Our goal is to ensure that your relationship with Dialysis At Home, Inc. is handled with the high degree of integrity and professionalism that you expect. Effective Date of This Notice: April 14, 2003 Notice: This site does not accept advertising.

ADDRESS 747 Cambridge St., Boston, MA 02135 PHONE (800) 833-1220 FAX (617) 783-0255 E-MAIL info@dialysisathome.com © Copyright 2003 Dialysis At Home Inc. All Rights Reserved. Dialysis At Home® and Solutions For Health® are registered trademarks of Dialysis At Home Inc. Privacy Policy Last update: 07/01/03