Blue Cross Blue Shield of Massachusetts is an Independent Licensee of the Blue Cross and Blue Shield Association. must comply with any state or federal privacy laws that require us to provide you with more privacy protections. For example, federal law provides special protections for substance use disorder information; Massachusetts state law restricts the disclosure of HIV and AIDS related information. In addition, we will not use (and are prohibited from using) your genetic information for underwriting purposes. Other Disclosures Require Your Written Authorization Except as provided in this notice, we will not use or disclose information about you without your written authorization. For example, we must have your written authorization to use or disclose your information for marketing purposes or (in most cases) to use or disclose psychotherapy notes. Although we would need written authorization to sell information about you, we do not sell members information. You may revoke your authorization at any time. Your authorization must be in writing. Your revocation will not affect any action that we have already taken in reliance on your authorization. If you would like us to disclose information about you to a third party, please complete the Permission for One-Time Disclosure of Information form available on our website or call Member Service for a copy of the form. Your Privacy Rights You have the following rights with respect to information about you. You may exercise any of these rights by calling the Member Service number listed on your member ID card or contacting us at the address listed at the end of this notice. The forms listed below are also available on our website. You have the right to receive information about privacy protections. Your member- education materials include a notice of your rights, and you may request a paper copy of this notice at any time. You have the right to inspect and get copies of information that we use to make decisions about you. This is your designated record set. Your request must be in writing. We may charge a reasonable fee for copying and mailing you this information. Please complete the Request for Access to Copies of Protected Health Information in Designated Record Set form to request copies of your information. You have the right to receive an accounting of certain disclosures that we make of information about you. Your request must be in writing. Please complete the Members Request for an Accounting of Disclosures form. Our response will exclude any disclosures made in support of treatment, payment, and health care operations or that you authorized (among others). An example of a disclosure that would be reported to you is our disclosure of your information in response to a court order. You have the right to ask us to correct or amend information you believe to be incorrect. Your request to correct or amend information must be in writing. Please complete the Members Request to Amend Protected Health Information form. If we deny your request, you may ask us to make your request part of your records. You have the right to ask that we restrict or refuse the disclosure of information about you and that we direct communications to you by alternative means or to alternative locations. While we may not always be able to agree to your request, we will make reasonable

Owl Labs Inc. Welcome Guide - Page 98 Owl Labs Inc. Welcome Guide Page 97 Page 99