Health Care Operations: NeoGenomics may use or disclose your PHI in order to support the health care operations of its business and monitor the quality of the care we provide. For example, we will submit a claim to you, your health care provider, or your health plan/insurer that includes information that identifies you and the type of services we performed for you. Payment: We may use and disclose your PHI to others for purposes of receiving payment for treatment and services that you receive. We may also disclose your PHI to another testing laboratory if we are unable to perform the testing ourselves and as such need to refer your specimen to that laboratory to perform the requested testing. For example, we may use your PHI to perform diagnostic tests, or provide your test results to your physician or other authorized health care provider. Treatment: We may use or disclose your PHI to provide and coordinate the treatment and services you receive. Please note that, for purposes of this Notice, any references to “we” or “NeoGenomics” include all business associates we may engage. Also, NeoGenomics must limit its uses, disclosures, or requests for your PHI to the “minimum necessary” to accomplish the intended purpose of such use, disclosure, or request, except as permitted by law. However, all of the ways in which we are permitted to use and disclose PHI will fall within one of the categories below. Not every possible use or disclosure in a category is listed below. With the exception of information that may qualify for special protection under state and/or federal law, the following categories describe different ways that we use and disclose your PHI. How We May Use and Disclose Protected Health Information About You WITHOUT YOUR CONSENT This may include your name, address, telephone number, social security number, date of birth, medical history, diagnosis, treatment, provider identification, financial responsibility, health insurance coverage (including group numbers and member identification numbers), and payment information. We attempt to collect the minimal amount of information necessary for NeoGenomics to provide our services to you and to obtain payment for those services. We strongly urge you to read this Notice carefully and thoroughly so that you will understand both our commitment to protecting the privacy of you PHI and how you can participate in the protection of this information. Please note that if other federal, state, or local laws, rules or regulations restrict or limit the use and disclosure of your PHI in ways that are permitted under this Notice, NeoGenomics will only use or disclose your PHI in compliance with the stricter law, rule or regulation. We will not use or disclose your PHI without your prior written authorization, except as permitted or required by law and described in this Notice. We are required by law to abide by the terms of this Notice. PHI is any information that identifies you or may be used to identify you (e.g., basic demographic information) that is created or received by a health care provider, health plan, employer or health care clearinghouse and that relates to your past, present or future physical or mental health or condition and related health care services, or provision of or payment for health care. The Notice also describes your rights with respect to your protected health information (“PHI”) when in the hands of NeoGenomics and its business associates, which are vendors that may assist us in providing services to you. This Notice of Health Information Privacy Practices (“Notice”) describes how we may use and disclose your protected health information (PHI) to carry out treatment, payment or health care operations and for other specified purposes that are permitted or required by law. This protection extends to any PHI whether in oral, written, or electronic format. and its subsidiaries and affiliates, is required by the Health Insurance Portability and Accountability Act of 1996, as amended (“HIPAA”), to maintain the privacy and security of your protected health information (PHI) and to provide you with a notice of NeoGenomics’ legal duties and privacy practices with respect to protected health information (PHI) that NeoGenomics may collect and maintain about you. NOTICE OF HEALTH INFORMATION PRIVACY PRACTICES THIS NOTICE DESCRIBES HOW HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION.

Public utilities code telephone privacy