HIPAA Notice

This notice is provided for transparency regarding the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") and its relationship to TrialMatchRX.

HIPAA is a federal law that establishes national standards for the protection of certain health information known as Protected Health Information (PHI). HIPAA applies to "Covered Entities" (health plans, healthcare clearinghouses, and healthcare providers who transmit health information electronically) and their "Business Associates."

TrialMatchRX is an informational technology platform that:

• Provides search and comparison tools for publicly available clinical trial data
• Does not provide medical treatment, diagnosis, or healthcare services
• Does not process health insurance claims or transactions
• Does not access your medical records or health plan information
• Does not receive PHI from healthcare providers or health plans
• Does not operate as a healthcare clearinghouse

While we are not subject to HIPAA, we take the privacy of all user information seriously. Any information you voluntarily provide to the Service (such as search criteria, health conditions of interest, or profile information) is handled in accordance with our Privacy Policy, treated with commercially reasonable security measures, not shared with third parties except as described in our Privacy Policy, and not considered PHI under HIPAA as it is voluntarily provided to a non-covered entity.

Please be aware of the following:

• Any health-related information you enter into the Service (such as medical conditions or search filters) is provided voluntarily and at your own discretion.
• We recommend that you do not enter highly sensitive personal health information (such as Social Security numbers, insurance ID numbers, or detailed medical records) into the Service.
• If you choose to contact a clinical trial site or healthcare provider through links in the Service, your interaction with that entity may be subject to HIPAA protections.

Although HIPAA does not apply to our Service, we are committed to protecting your information through industry-standard encryption and security measures, transparent data collection and usage practices as outlined in our Privacy Policy, strict internal access controls and data handling procedures, regular security assessments, and prompt notification in the event of any data breach affecting your information.

If you use the Service to identify and subsequently contact clinical trial sites or healthcare providers, please note that those entities ARE likely HIPAA Covered Entities. Any information you provide directly to clinical trial sites or healthcare providers is subject to their own privacy practices and HIPAA obligations. We encourage you to review their Notice of Privacy Practices before sharing personal health information.

In addition to federal regulations, various state laws may provide additional privacy protections for health-related information. We comply with applicable state privacy laws, including but not limited to the Louisiana Database Security Breach Notification Law and other applicable state consumer protection laws.

We may update this HIPAA Notice from time to time to reflect changes in law, our practices, or the nature of our Service. We will notify you of material changes by posting the updated notice on the Service.

If you have questions about HIPAA as it relates to TrialMatchRX or our privacy practices, please contact us at: trialmatchrx@ijelany.com