HIPAA Notice of Privacy Practices

Who We Are

Zeihan ProHealth, LLC (“Zeihan ProHealth,” “we,” “our,” or “us”) is a public health consulting and implementation organization that supports community-based outreach, preventive health screenings, care coordination, and public health programs.

Zeihan ProHealth does not provide medical diagnosis, treatment, or clinical care. All services, including screenings, are preventive and educational in nature and are intended to support awareness, early identification of risk, and referral to appropriate healthcare providers.

Depending on the nature of the engagement, Zeihan ProHealth may act as a Business Associate on behalf of healthcare providers, health plans, or other covered entities and may collect, use, and manage Protected Health Information (“PHI”) in support of public health and program activities.

Our Responsibilities

We are required by law to:

• Maintain the privacy and security of your Protected Health Information (PHI)
• Provide you with this Notice of our legal duties and privacy practices
• Follow the terms of this Notice currently in effect
• Notify you following a breach of unsecured PHI when required by law

We will not use or disclose your PHI other than as described in this Notice unless you provide written authorization.

How We Protect Your Information

Zeihan ProHealth implements administrative, technical, and physical safeguards to protect PHI, including:

• Restricted access to PHI through secure, login-protected systems
• Limiting access to authorized internal team members only
• Secure data collection and storage using HIPAA-compliant platforms
• Application of the “minimum necessary” standard when accessing or using PHI

How We May Use and Disclose Your Information

We may use or disclose your PHI for the following purposes:

Program Operations and Services

• Conduct preventive (non-diagnostic) health screenings
• Support community outreach and engagement activities
• Coordinate program services and implementation

Public Health Activities

• Report information to public health authorities as required by law
• Support population health initiatives and interventions
• Assist in efforts to improve community health outcomes

Care Coordination and Referrals

• Refer individuals to healthcare providers or community resources
• Support follow-up communication related to services or referrals

Research, Evaluation, and Quality Improvement

• Evaluate program effectiveness and outcomes
• Support grant reporting and funding requirements
• Conduct public health research, analytics, and program evaluation

Where appropriate, information may be:

• De-identified
• Aggregated
• Used as a limited data set in accordance with applicable laws

Business Associates and Partners

We may share PHI with:

• Healthcare providers and health systems
• Health plans and managed care organizations
• Public health agencies and government entities
• Grant funders and program partners
• Academic and research institutions

All disclosures are made:

• In accordance with applicable federal and state laws, including HIPAA
• Under executed Business Associate Agreements (BAAs) or other legally required agreements when PHI is shared
• Using the “minimum necessary” standard

Zeihan ProHealth primarily shares de-identified or aggregated information. Identifiable PHI is only shared when necessary and permitted under applicable agreements and legal requirements.