Notice of Privacy Practices

Effective Date: April 4, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Our Commitment to Your Privacy

Advanced Gastro-Intestinal Medical Associates (“AGI,” “we,” “our,” or “us”), led by Patrick Peiying Xiao, MD, is committed to protecting the privacy of your health information. We are required by law to maintain the privacy of your Protected Health Information (PHI), to provide you with this Notice of our legal duties and privacy practices with respect to PHI, and to notify you following a breach of unsecured PHI. We must follow the terms of this Notice while it is in effect.

How We May Use and Disclose Your Protected Health Information

We may use and disclose your PHI for the following purposes:

Treatment

We may use your PHI to provide, coordinate, or manage your healthcare and related services. For example, we may share your health information with other physicians, specialists, hospitals, laboratories, or other healthcare providers involved in your care, such as referring physicians, surgical centers, or pathology labs involved in your gastroenterology procedures.

Payment

We may use and disclose your PHI to bill and collect payment for the treatment and services we provide. For example, we may send your PHI to your health insurance plan to obtain pre-authorization for a colonoscopy or other procedure, or to process claims for payment.

Healthcare Operations

We may use and disclose your PHI for our healthcare operations, which include quality assessment, staff training, business management, auditing, and other activities necessary to run our practice and serve our patients.

Other Permitted Uses and Disclosures

We may also use or disclose your PHI without your authorization for the following purposes:

• As Required by Law: We will disclose PHI when required to do so by federal, state, or local law.
• Public Health Activities: For public health activities, including reporting disease, injury, vital events, and conducting public health surveillance or investigations.
• Abuse or Neglect: To report suspected abuse, neglect, or domestic violence to government authorities as permitted or required by law.
• Health Oversight Activities: To health oversight agencies for activities authorized by law, such as audits, inspections, and investigations.
• Judicial and Administrative Proceedings: In response to a court order, subpoena, or other lawful process.
• Law Enforcement: To law enforcement officials for certain law enforcement purposes as permitted by law.
• Coroners and Funeral Directors: To coroners, medical examiners, and funeral directors as permitted by law.
• Organ and Tissue Donation: To organizations involved in organ procurement and transplantation.
• Research: For research purposes under certain conditions approved by an institutional review board.
• To Avert a Serious Threat: To prevent or lessen a serious and imminent threat to your health or safety or the health or safety of the public.
• Workers’ Compensation: For workers’ compensation or similar programs as authorized by law.
• Military and Veterans: If you are a member of the armed forces, as required by military command authorities.
• Inmates: If you are an inmate of a correctional institution, as necessary for your health and safety.

Uses and Disclosures Requiring Your Authorization

We will obtain your written authorization before using or disclosing your PHI for purposes other than those described above, including:

• Marketing purposes
• Sale of your PHI
• Most uses and disclosures of psychotherapy notes (if applicable)
• Other uses and disclosures not described in this Notice

You may revoke your authorization at any time by submitting a written request to our office. Revocation will not affect any actions we took in reliance on your authorization before we received your revocation.

Your Rights Regarding Your Health Information

You have the following rights with respect to your PHI:

• Right to Access: You have the right to inspect and obtain a copy of your PHI maintained in our records. Your request must be submitted in writing. We may charge a reasonable fee for copying and mailing.
• Right to Amend: You have the right to request an amendment to your PHI if you believe it is incorrect or incomplete. Your request must be submitted in writing with a reason for the amendment. We may deny your request in certain circumstances.
• Right to an Accounting of Disclosures: You have the right to request a list of certain disclosures of your PHI that we have made. Your request must be submitted in writing and specify the time period (not to exceed six years).
• Right to Request Restrictions: You have the right to request restrictions on certain uses and disclosures of your PHI. We are not required to agree to your request, except that we must agree to restrict disclosures to a health plan for services you paid for in full out-of-pocket.
• Right to Request Confidential Communications: You have the right to request that we communicate with you about health matters using alternative means or at alternative locations (e.g., sending correspondence to a different address or calling a different phone number).
• Right to a Paper Copy of This Notice: You have the right to obtain a paper copy of this Notice at any time, even if you previously agreed to receive it electronically. You may request a copy at our front desk or by calling our office.
• Right to Be Notified of a Breach: You have the right to be notified in the event of a breach of your unsecured PHI.

Changes to This Notice

We reserve the right to change this Notice and to make the revised or changed Notice effective for PHI we already have about you as well as any PHI we receive in the future. We will post a copy of the current Notice in our office and on our website. The Notice will contain the effective date on the first page.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with our office or with the Secretary of the U.S. Department of Health and Human Services. To file a complaint with our office, please contact us using the information below. You will not be penalized or retaliated against for filing a complaint.

To file a complaint with the U.S. Department of Health and Human Services, you may:

• Send a written complaint to: Office for Civil Rights, U.S. Department of Health and Human Services, 200 Independence Avenue, S.W., Washington, D.C. 20201
• Call the HHS toll-free hotline: 1-877-696-6775
• Visit: www.hhs.gov/ocr/complaints

Contact Information

If you have questions about this Notice or wish to exercise any of your rights, please contact: