NOTICE OF PRIVACY PRACTICES
Effective Date: September 27, 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Generations Medical Group LLC ("Generations Medical Group," "GMG," "we," "us," or "our") is required by law to maintain the privacy and security of your protected health information ("PHI"). This Notice describes our privacy practices, our responsibilities, and your rights regarding your health information.
Your Rights
You have certain rights regarding your health information.
Get a Copy of Your Medical Record
You may ask to see or obtain an electronic or paper copy of your medical record and other health information we maintain about you.
We will generally provide a copy or summary of your health information within the time required by law. We may charge a reasonable, cost-based fee when permitted by law.
Ask Us to Correct Your Medical Record
You may ask us to correct health information that you believe is incorrect or incomplete.
We may deny your request in certain circumstances, but we will explain the reason for the denial in writing as required by law.
Request Confidential Communications
You may ask us to contact you in a specific way, such as at a particular telephone number or email address, or to send communications to a different address.
We will accommodate reasonable requests as required by law.
Ask Us to Limit What We Use or Share
You may ask us not to use or disclose certain health information for treatment, payment, or healthcare operations.
We are not required to agree to every request.
If you pay for a healthcare service or item completely out of pocket, you may ask us not to disclose information about that service or item to your health plan for purposes of payment or healthcare operations. We will honor the request unless disclosure is required by law.
Get a List of Certain Disclosures
You may request an accounting of certain disclosures of your health information made during the six years before your request.
The accounting will identify certain persons or organizations with whom information was shared and why. Some disclosures, including certain disclosures for treatment, payment, or healthcare operations, are not required to be included.
We will provide one accounting in a 12-month period without charge. We may charge a reasonable, cost-based fee for additional requests when permitted by law.
Get a Copy of This Notice
You may request a paper copy of this Notice at any time, even if you previously agreed to receive it electronically.
Choose Someone to Act for You
If you have given someone medical power of attorney or if someone is legally authorized to act as your personal representative, that person may exercise your rights and make choices regarding your health information as permitted by law.
We may verify that person's authority before taking action.
File a Complaint
If you believe your privacy rights have been violated, you may file a complaint with Generations Medical Group.
You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights.
We will not retaliate against you for filing a complaint.
Your Choices
For certain health information, you may tell us your preferences about what we share.
These situations may include:

• Sharing information with family members, friends, or others involved in your care

• Sharing information in a disaster-relief situation

• Certain communications regarding our services

• Certain marketing activities

If you are unable to tell us your preference, such as during an emergency, we may share information when we believe doing so is in your best interest and is permitted by law.
We will obtain your written authorization when HIPAA or other applicable law requires it.
We will not sell your protected health information or use it for purposes requiring authorization without obtaining the authorization required by law.
How We Typically Use and Disclose Your Health Information
Treatment
We may use your health information and share it with other healthcare professionals involved in your treatment.
For example, your provider may share relevant medical information with another healthcare professional involved in your care.
Healthcare Operations
We may use and disclose your health information to operate our practice, improve the quality of care, coordinate services, and conduct other permitted healthcare operations.
For example, we may review patient records as part of quality improvement activities.
Payment
We may use and disclose health information when necessary for payment activities.

Generations Medical Group's hormone care program is self-pay; however, payment-related uses or disclosures may still occur when necessary to process transactions, maintain financial records, or perform other legally permitted payment activities.

Other Uses and Disclosures

We may use or disclose health information when permitted or required by law, including for certain:

• Public health and safety activities

• Health oversight activities

• Judicial or administrative proceedings

• Law-enforcement purposes

• Workers' compensation matters

• Coroner, medical examiner, or funeral director activities

• Organ and tissue donation

• Research activities when legally permitted

• Government functions

• Situations necessary to prevent or reduce a serious threat to health or safety

The specific requirements and limitations imposed by applicable law will determine whether information may be disclosed in these circumstances.

Substance Use Disorder Records

Certain substance use disorder treatment records may receive additional protection under federal law, including 42 CFR Part 2.

When Generations Medical Group maintains information that is subject to these additional protections, we will use and disclose that information only as permitted by applicable law.

Certain uses and disclosures of substance use disorder records may require your written consent or may otherwise be subject to protections beyond those that generally apply to other health information.

This language is included because the current HHS model NPP requires HIPAA covered entities that create or maintain Part 2 records to address those protections.

Electronic Communications and Telehealth

Generations Medical Group provides certain services through telehealth and electronic communication systems.

We use reasonable administrative, technical, and physical safeguards designed to protect health information transmitted or maintained electronically.

Electronic communications may include appointment information, patient forms, telehealth communications, and other information necessary to provide or coordinate your care.

Our Responsibilities

Generations Medical Group is required by law to:

• Maintain the privacy and security of your protected health information.

• Notify you promptly if a breach occurs that may have compromised the privacy or security of your information.

• Follow the duties and privacy practices described in this Notice.

• Provide you with a copy of this Notice.

• Use or disclose your information only as permitted by law or as authorized by you.

If you give us written authorization to use or disclose your health information, you may revoke that authorization in writing, subject to applicable legal limitations.

These responsibilities track the current HHS provider model.

Changes to This Notice

We may change the terms of this Notice.

Changes may apply to all health information we maintain, including information created or received before the change.

When this Notice is materially revised, the updated Notice will be made available as required by law and posted on our website.

Questions or Complaints

If you have questions about this Notice, want to exercise your privacy rights, or believe your privacy rights have been violated, contact:

Generations Medical Group LLC
Privacy Officer
Phone: (801) 704-5484

You may also file a complaint with the:

U.S. Department of Health and Human Services
Office for Civil Rights

HHS Office for Civil Rights – File a HIPAA Complaint

Generations Medical Group will not retaliate against you for filing a complaint.