© 202 6 Lumelight. All Rights Reserved. Coroners, Medical Examiners, and Funeral Directors . We may release PHI to a coroner or medical examiner. This may be necessary, for example, to identify a deceased person or determine the cause of death. We may also release medical information about patients to funeral directors, as necessary to carry out their duties. National Security and Intelligence Activities . We may release your PHI to authorized federal officials for intelligence, counterintelligence, and other national security activities authorized by law. Inmates . If you are an inmate of a correctional institution or are in the custody of a law - enforcement official, we may disclose your PHI to the correctional institution or law - enforcement official if necessary (1) for the institution to provide you with health c are; (2) to protect your health and safety or the health and safety of others; or (3) for the safety and security of the correctional institution. Research . We may disclose your PHI to researchers when: a. The individual identifiers have been removed; or b. When an institutional review board or privacy board has reviewed the research proposal and established protocols to ensure the privacy of the requested information and approves the research. VI. Required Disclosures The following is a description of disclosures of your PHI we are required to make. Government Audits . We are required to disclose your PHI to the Secretary of the United States Department of Health and Human Services when the Secretary is investigating or determining our compliance with the HIPAA privacy rule. Disclosures to You . When you request, we are required to disclose to you the portion of your PHI that contains medical records, billing records, and any other records used to make decisions regarding your health care benefits. We are also required, when requested, to provid e you with an accounting of most disclosures of your PHI if the disclosure was for reasons other than for payment, treatment, or health care operations, and if the PHI was not disclosed pursuant to your individual authorization. VII. Other Disclosures Personal Representatives . We will disclose your PHI to individuals authorized by you, or to an individual designated as your personal representative, attorney - in - fact, etc., so long as you provide us with a written notice/authorization and any supporting documents (i.e., power of attorney). Note: Under the HIPAA privacy rule, we do not have to disclose information to a personal representative if we have a reasonable belief that: a. You have been, or may be, subject to domestic violence, abuse, or neglect by such person; or b. Treating such person as your personal representative could endanger you; and c. In the exercise of professional judgment, it is not in your best interest to treat the person as your personal representative. 5