HIPAA Notice of Privacy Practices

Effective date: November 20, 2024

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. 

In this Notice of Privacy Practices, Adaptive Biotechnologies Corporation (“Adaptive,” “we” or “us”), explains our practices in compliance with the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) regarding the use and disclosure of medical and other personal information (your “protected health information” or “PHI”)) that we collect in conjunction with our clinical laboratory services, such as our clonoSEQ® services , and your rights relating to your PHI.

OVERVIEW

Your Rights
You have the right to:

  • Get a copy of your medical record
  • Ask us to correct your medical record
  • Request confidential communication
  • Ask us to limit the PHI we use or disclose
  • Get a list of those with whom we’ve disclosed your PHI for certain purposes
  • Get a copy of this privacy notice
  • Choose someone to act for you
  • Ask questions about your PHI
  • File a complaint if you believe your privacy rights have been violated

Your Choices
You have some choices in the way that we use and disclose your PHI, such as how or whether we:

  • Tell your family and friends about your condition
  • Provide your PHI to others so that you may be located
  • Engage in sales and marketing activities

How We Typically Use and Disclose Your Protected Health Information
We may use and disclose your PHI for various reasons, such as when we:

  • Provide clinical laboratory services for you
  • Run our organization
  • Bill for testing services
  • Help with public health and safety issues Do research under certain conditions
  • Work with a coroner, medical examiner, or funeral director
  • Comply with the law
  • Address workers’ compensation, law enforcement, and other government or judicial requests
  • Respond to lawsuits and legal actions
  • Each of the topics mentioned above is discussed in greater detail below.

YOUR RIGHTS
When it comes to your PHI, you have certain rights. This section explains your rights and some of our responsibilities to help you.

If you have questions about how to exercise your rights, please email us at privacy@adaptivebiotech.com or contact us by phone at (888) 552-8988 (US Toll Free).

Get an electronic or paper copy of your medical record

  • You can ask to see or get an electronic or paper copy of your medical record and other PHI we have about you by
    • Using our electronic request form
    • By completing our form and sending it to us:
      • By email, at privacy @adaptivebiotech.com
      • By mail, at 1165 Eastlake Avenue East, Seattle, WA 98109 ATTN: HIPAA Privacy Officer
      • By fax, at (206) 260-7175
  • We will provide a copy or a summary of your PHI, usually within 30 days of your request. We may charge a reasonable, cost-based fee for any copy or summary.

Ask us to correct your medical record

  • You can ask us to correct PHI about you that you think is incorrect or incomplete.
  • We may say “no” to your request, but if we do, we’ll tell you why in writing within 60 days.

Request confidential communications

  • You can ask us to contact you in a specific way (for example, home or office phone) or to send mail to a different address.
  • We will say “yes” to all reasonable requests.

Ask us to limit what we use or disclose

  • You can ask us not to use or disclose certain of your PHI. Except as noted just below, we are not required to agree to your request, and we may say “no” if it would affect your care or for other justifiable reasons.
  • If you pay for a service or health care item out-of-pocket in full, you can ask us not to disclose with your health insurer any information about your receipt of that service or health care item for the purpose of receiving payment or conducting healthcare operations. We will say “yes” unless a law requires us to do otherwise.

Get a list of those with whom we’ve disclosed protected health information

  • You can ask for a list (accounting) of the times we’ve disclosed your PHI for six years prior to the date you ask, who we disclosed it with, and why.
  • We will include in that list all disclosures except for those that were made for treatment, payment, or health care operations purposes, and certain other disclosures (such as any you asked us to make). We’ll provide one accounting per year for free but will charge a reasonable, cost-based fee if you ask for another one within 12 months.

Get a copy of this privacy notice

  • You can ask for a paper copy of this notice at any time, even if you have agreed to receive the notice electronically. We will provide you with a paper copy promptly.

Choose someone to act for you

  • If you have given someone medical power of attorney or if someone is your legal representative or guardian (or, in some cases, if someone is an administrator, executor, or other authorized person responsible for your estate), that person can exercise your rights and make choices about your PHI.
  • If you are an unemancipated minor, your parent or legal guardian may exercise your rights and make choices about your PHI on your behalf.
  • We will do what we can to make sure that any person who purports to be your legal representative has this authority before we take any action as directed or authorized by that person.

Ask questions
You can ask questions about this notice and your rights at any time. Please contact our Customer Service Department or email us at privacy@adaptivebiotech.com.

File a complaint if you feel your rights are violated
You can complain if you feel we have violated your rights by contacting us either by mail at Adaptive Biotechnologies Corporation, Attn: Privacy Officer, 1165 Eastlake Avenue East Seattle, Washington 98109, or by email at privacy@adaptivebiotech.com.

You can file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by sending a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201, calling 1-877-696-6775, or visiting http://www.hhs.gov/ocr/privacy/hipaa/complaints/

We will not retaliate against you for complaining to us or filing a complaint.

YOUR CHOICES

In certain circumstances, you have the right to choose when and how much of your PHI we may disclose. If you have a clear preference for how we disclose your PHI in any of the situations described below, please email us at privacy@adaptivebiotech.com. Tell us what you want us to do, and we will follow your instructions regarding the choices described below.

You have the right to tell us to:

  • Disclose PHI with your family, close friends, or others involved in your care or payment for your care.
  • Disclose PHI with a disaster relief organization or others in order to help notify a person involved in your care about your location, condition, or vital status.
  • Disclose PHI with organ procurement organizations or related entities for the purpose of facilitating organ or tissue donation and transplantation.
  • If you are not able to tell us your preference, we may go ahead and disclose your PHI if we believe it is in your best interest. We may also disclose your PHI when needed to lessen a serious and imminent threat to health or safety.
  • Unless you give us written permission, we are prohibited from sharing your PHI with persons other than our service providers:
  • For marketing purposes
  • In exchange for any form of remuneration (However, if we were to sell assets, business units, or our company, it would be permissible for us to transfer your PHI as part of such a sale).

OUR USES AND DISCLOSURES

In accordance with applicable federal and state law, we typically use or disclose your PHI in the following ways:

When providing clinical laboratory services for you
We can use your PHI and disclose it with other professionals who are treating you.
Example: Discussions of the minimal residual disease result with your treating physician.

Run our organization or help your health care providers run their organizations
We can use and disclose your PHI with those who help us to operate our laboratory, to develop and improve our services, and to contact you when necessary. We can also disclose your PHI with your health care providers to help them run their businesses, such as to process claims for payment for services they provide to you or to conduct quality control.

Example: We disclose PHI about you with our third-party service providers to manage our business, for example, helping us process your test orders and helping us securely store your PHI.

Bill for your services

We can use and disclose your PHI to bill and get payment from your health plans or other entities.

Example: We may disclose PHI about you to a third-party billing services provider to process and forward to your health insurance plan so it will pay for the services you received from us.

Help with public health and safety issues
We can disclose PHI about you for certain situations such as:

  • Preventing disease
  • Participating in public health investigations
  • Helping with product recalls
  • Reporting adverse reactions to medications or certain other injuries
  • Reporting suspected abuse, neglect, or domestic violence
  • Preventing or reducing a serious threat to anyone’s health or safety

Do Research
We may maintain certain of your PHI in certain databases, which may be used or accessed by individuals within our organization for research purposes. We can use or disclose your PHI for health research (1) if we have obtained your signed authorization or (2) if we have received approval from an Institutional Review Board or Privacy Board to conduct the research without your express authorization. We can also use a subset of your PHI (known as a limited data set) without your signed authorization to prepare for research, such as to prepare a research protocol, or disclose your PHI for those purposes. We generally may disclose PHI for research purposes about anyone who is deceased without the deceased’s representative’s signed authorization.

Work with a coroner, medical examiner, or funeral director
We can disclose PHI about an individual with a coroner, medical examiner, or funeral director when the individual dies.

Address workers’ compensation, law enforcement, and other government requests
Subject to certain limitations, we can use or disclose PHI about you:

  • For adjudication of workers’ compensation claims or benefits
  • For law enforcement purposes or with a law enforcement official
  • With health oversight agencies for activities authorized by law
  • For special government functions such as military, national security, and presidential protective services

Comply with the law
We will disclose PHI about you if state, federal or local laws require it, including with the Department of Health and Human Services if it wants to see that we’re complying with federal privacy law.

Respond to lawsuits and legal actions or proceedings
We can disclose PHI about you in response to a court or administrative order, or in response to a subpoena or other lawful process.

How else can we use or disclose your protected health information?
We are allowed or required to disclose your PHI in other ways and with other individuals in ways that the law permits, such as to contribute to the public good, public health, or for law enforcement purposes. For more information see: http://www.hhs.gov/ocr/privacy/hipaa/understanding/consumers/index.html

We may not use or disclose your PHI other than as described in this notice without your written authorization. If you do provide such authorization, you may revoke that authorization, in whole or in part, at any time. You must send us your revocation in writing.

OUR RESPONSIBILITIES

We are required to:

  • maintain the privacy and security of your PHI in accordance with applicable law;
  • provide you with this notice of our legal duties and privacy practices with respect to your PHI
  • notify you if a breach occurs that may have compromised the privacy or security of your PHI; and
  • adhere to the duties and privacy practices described in this notice and give you a paper copy of the notice upon your request

For more information see: www.hhs.gov/ocr/privacy/hipaa/understanding/consumers/noticepp.html

CHANGES TO TERMS OF THIS NOTICE
We can change the terms of this notice, and the changes will apply to all information we have about you. The new notice will be available upon request, in our office, and on our web site.

OTHER INSTRUCTIONS FOR NOTICE
You can contact Adaptive’s Privacy Office, including the HIPAA Privacy Officer:

  • By email at privacy@adaptivebiotech.com
  • By mail at 1165 Eastlake Avenue East, Seattle WA 98109