111 • Your right to file a complaint with the Fund and with the Secretary of the United States Department of Health and Human Services (HHS), and • The person or office you should contact for further information about the Fund’s privacy practices. Section 2: Your Protected Health Information Protected Health Information (PHI) Defined The term “Protected Health Information” (PHI) includes all individually identifiable health information relating to your past, present or future physical or mental health condition or to payment for health care. PHI includes information maintained by the Fund in oral, written, or electronic form. When the Fund May Disclose your PHI Under the law, the Fund may disclose your PHI without your consent or authorization, and without providing you an opportunity to agree or object, in the following cases: At your request. If you request it, the Fund is required to give you access to certain PHI in order to allow you to inspect and/or copy it. You have additional rights explained in Section 3. As required by HHS. The Secretary of the United States Department of Health and Human Services may require the disclosure of your PHI to investigate or determine the Fund’s compliance with the privacy regulations. For treatment, payment or health care operations. The Fund and its business associates will use PHI in order to carry out: • Treatment, • Payment, or • Health care operations. Treatment is the provision, coordination, or management of health care and related services. It also includes but is not limited to consultations and referrals between one or more of your providers. For example, the Fund may disclose to a treating orthodontist the name of your treating dentist so that the orthodontist may ask for your dental x-rays from the treating dentist. Payment includes, but is not limited to, actions to make coverage determinations and payment (including billing, claims management, subrogation, Fund reimbursement, reviews for Medical Necessity and appropriateness of care, utilization review and preauthorization). For example, the Fund may tell a doctor whether you are eligible for coverage or what percentage of the bill will be paid by the Plan. If we contract with third parties to help us with payment operations, such as a physician that reviews medical claims, we will also disclose information to them. These third parties are known as “business associates.” Health care operations includes, but is not limited to, quality assessment and improvement, reviewing competence or qualifications of health care professionals, underwriting, premium rating and other insurance activities relating to creating or renewing insurance contracts. It also includes disease management, case management, conducting or arranging for medical review, legal services, and