HIPAA

NOTICE OF PRIVACY PRACTICES

Atlanta Oculofacial Plastic Surgery (AOPS)
Effective Date: January 1^st, 2026

This Notice of Privacy Practices (“Notice”) describes how medical information about you may be used and disclosed and how you can access this information. Please review it carefully.

OUR LEGAL DUTIES

Atlanta Oculofacial Plastic Surgery (“AOPS,” “we,” “our,” or “us”) is required by law to:

• Maintain the privacy and security of your Protected Health Information (“PHI”);
• Provide you with this Notice of our legal duties and privacy practices regarding PHI;
• Follow the terms of the Notice currently in effect; and
• Notify you following a breach of unsecured PHI as required by law.

USES AND DISCLOSURES OF PHI WITHOUT YOUR AUTHORIZATION

We may use and disclose your PHI without your written authorization for the following purposes:

Treatment

We may use and disclose your PHI to provide, coordinate, or manage your medical care. This includes communication with physicians, nurses, technicians, pharmacies, laboratories, surgical facilities, anesthesiologists, and other healthcare providers involved in your care.

Payment

We may use and disclose your PHI to obtain payment for services provided to you. Although AOPS is a self-pay practice and does not participate with insurance plans, payment-related

disclosures may include billing services, credit card processing, collection activities, or verification of payment.

Healthcare Operations

We may use and disclose your PHI for healthcare operations, including quality assessment, staff training, accreditation, licensing, credentialing, legal review, auditing, and business management activities.

OTHER PERMITTED OR REQUIRED DISCLOSURES

We may disclose your PHI without your authorization in the following circumstances, as permitted or required by law:

• Business Associates: To third parties who perform services on our behalf (e.g., billing services, IT providers), who are contractually required to protect your PHI.
• As Required by Law: To comply with federal, state, or local laws, court orders, subpoenas, or legal processes.
• Public Health Activities: For public health reporting, disease control, or reporting adverse events.
• Health Oversight Activities: For audits, investigations, inspections, or licensure activities by government authorities.
• Abuse, Neglect, or Domestic Violence: To appropriate authorities when required or permitted by law.
• Law Enforcement: For law enforcement purposes as required by law.
• Coroners, Medical Examiners, and Funeral Directors: To identify a deceased person or determine cause of death.
• Research: For research purposes when approved by an institutional review board or as permitted by law.
• Serious Threat to Health or Safety: To prevent or lessen a serious and imminent threat to a person or the public.

USES AND DISCLOSURES REQUIRING YOUR WRITTEN AUTHORIZATION

Certain uses and disclosures of your PHI require your written authorization, including:

• Use of PHI for marketing purposes;
• Disclosure of psychotherapy notes (if applicable);
• Sale of PHI; and
• Use or disclosure of photographs, videos, or testimonials for marketing or educational purposes beyond treatment, except as otherwise authorized by you.

You may revoke any authorization in writing at any time, except to the extent we have already relied on it.

YOUR RIGHTS REGARDING YOUR PHI

You have the following rights regarding your PHI:

Right to Inspect and Obtain Copies

You have the right to inspect and obtain a copy of your medical records and other PHI maintained by AOPS, subject to limited exceptions. We may charge a reasonable, cost-based fee as permitted by law.

Right to Request an Amendment

If you believe your PHI is incorrect or incomplete, you may request an amendment. We may deny your request in certain circumstances as permitted by law.

Right to Request Restrictions

You have the right to request restrictions on certain uses or disclosures of your PHI. We are not required to agree to all requested restrictions.

Right to Request Confidential Communications

You may request that we communicate with you in a specific manner or at a specific location. We will accommodate reasonable requests.

Right to an Accounting of Disclosures

You have the right to receive an accounting of certain disclosures of your PHI made by AOPS, as permitted by law.

Right to a Paper Copy of This Notice

You have the right to obtain a paper copy of this Notice at any time, even if you have agreed to receive it electronically.

COMPLAINTS

If you believe your privacy rights have been violated, you may file a complaint with AOPS or with the U.S. Department of Health and Human Services. You will not be retaliated against for filing a complaint.

Privacy Officer
Atlanta Oculofacial Plastic Surgery
Email: dr.reddy@atlantaoculofacialplastics.com

U.S. Department of Health and Human Services
Office for Civil Rights
www.hhs.gov/ocr/privacy/hipaa/complaints

CHANGES TO THIS NOTICE

We reserve the right to change the terms of this Notice and make the revised Notice effective for all PHI we maintain. The revised Notice will be made available upon request and posted in our office and on our website.

CONTACT INFORMATION

If you have questions about this Notice or our privacy practices, please contact:

Atlanta Oculofacial Plastic Surgery
Email: dr.reddy@atlantaoculofacialplastics.com

This Notice of Privacy Practices applies to all services provided by Atlanta Oculofacial Plastic Surgery, L.L.C and Dr. Sahitya Reddy, MD.