Notice of Privacy Practices (HIPAA)

How Anglican Care Handles Your Health Information in Accordance with HIPAA Standards

“Do not neglect to do good and to share what you have, for such sacrifices are pleasing to God.” — Hebrews 13:16

anglicancare.org

Effective Date: August 14, 2026 | Version 1.0

1. UNDERSTANDING THIS NOTICE

This Notice of Privacy Practices describes how Anglican Care (“the Ministry”) may use and disclose protected health information (“PHI”) to carry out sharing administration, payment activities, and ministry operations, and the rights Members have regarding their health information. “Protected health information” means individually identifiable health information transmitted or maintained in any form.

Anglican Care is a faith-based Health Care Sharing Ministry, not a licensed insurance company or a “covered entity” in the traditional HIPAA sense. However, because the Ministry collects, stores, and processes Members’ health information for the purpose of coordinating the sharing of medical needs, we voluntarily adopt privacy and security standards consistent with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations. This Notice is provided as a matter of transparency and best practice, even where HIPAA may not strictly apply to the Ministry.

2. HOW WE MAY USE YOUR HEALTH INFORMATION

The following categories describe ways that Anglican Care uses Member health information. These examples are not exhaustive, but illustrate the types of uses the Ministry makes:

Sharing Administration: We use health information to review, process, and coordinate the sharing of medical needs submitted by Members, including verifying eligibility under the Sharing Guidelines, determining whether a need qualifies for sharing, and calculating the amount to be shared.

Contribution Processing: We use limited health information to associate medical needs with Monthly Contributions and to maintain accurate records of sharing activity for Ministry accounting.

Member Communication: We use health information to communicate with Members about their medical need submissions, determination outcomes, appeal rights, and Ministry updates relevant to their participation.

Ministry Operations: We use de-identified or aggregated health information for quality improvement, trend analysis, program design, and operational planning. All aggregated data is stripped of personally identifiable information before use.

“Let each of you look not only to his own interests, but also to the interests of others.” — Philippians 2:4

3. HOW WE MAY DISCLOSE YOUR HEALTH INFORMATION

Anglican Care may disclose Member health information in the following circumstances. Disclosures are limited to the minimum information necessary to accomplish the intended purpose, consistent with HIPAA’s “minimum necessary” standard.

3.1 Disclosures With Your Authorization

We will obtain your written authorization before using or disclosing your health information for any purpose not described in this Notice. You may revoke an authorization at any time by submitting a written request to the Ministry’s Privacy Officer, except to the extent that action has already been taken in reliance on it.

3.2 Disclosures Without Authorization

We may use or disclose health information without your authorization in the following situations, as permitted or required by law:

As Required by Law: When disclosure is mandated by federal, state, or local law.

Public Health Activities: To public health authorities for reporting disease, injury, or vital events as required by law.

Law Enforcement: To law enforcement officials for legal proceedings, investigations, or to identify or locate a person, subject to legal requirements.

Serious Threats: To prevent or lessen a serious and imminent threat to the health or safety of a person or the public.

Compliance & Oversight: To agencies overseeing health care compliance, audits, or investigations, subject to appropriate legal safeguards.

Workers’ Compensation: For workers’ compensation or similar programs as authorized by law.

Research: Under limited circumstances where an institutional review board or privacy board has approved the disclosure.

IMPORTANT PRIVACY COMMITMENTS • We never sell Member health information to any third party. • We never share health information with brokers or referral partners under any circumstances.

4. YOUR RIGHTS REGARDING YOUR HEALTH INFORMATION

Under HIPAA, you have certain rights regarding the health information the Ministry maintains about you. Anglican Care voluntarily honors these rights for all Members:

Right to Access: You have the right to inspect and obtain a copy of your health information maintained by the Ministry. Requests must be submitted in writing to the Privacy Officer. We will respond within thirty (30) days. A reasonable, cost-based fee may apply for copies.

Right to Amend: If you believe your health information is inaccurate or incomplete, you may request an amendment. We will respond within sixty (60) days. We may deny the request if the information was not created by us, is not part of our records, or is already accurate.

Right to Request Restrictions: You may request that we restrict how we use or disclose your health information for sharing administration, payment, or ministry operations. We are not required to agree to all restrictions, but we will honor those we agree to in writing.

Right to Confidential Communications: You may request that we communicate with you about health matters in a certain way or at a certain location (e.g., by mail to a specific address). We will accommodate reasonable requests.

Right to an Accounting of Disclosures: You have the right to request a list of certain disclosures we have made of your health information for purposes other than sharing administration, payment, or operations. Requests must be in writing. We will provide the accounting within sixty (60) days.

Right to a Paper Copy of This Notice: You have the right to receive a paper copy of this Notice at any time, even if you agreed to receive it electronically. Copies are available at anglicancare.org/privacy or by request.

Right to File a Complaint: If you believe your privacy rights have been violated, you may file a complaint with the Ministry and with the U.S. Department of Health and Human Services. We will not retaliate against you for filing a complaint.

5. OUR RESPONSIBILITIES

Anglican Care is committed to protecting the privacy of your health information. In addition to the rights described above, the Ministry assumes the following responsibilities:

• Maintain the confidentiality and security of all Member health information.
• Provide this Notice to all Members upon enrollment and make it available upon request.
• Abide by the terms of the Notice currently in effect.
• Apply the “minimum necessary” standard to all uses and disclosures of health information.
• Train all staff and volunteers on privacy practices upon onboarding and annually thereafter.
• Conduct periodic risk assessments to identify and mitigate privacy and security vulnerabilities.
• Notify affected Members in writing within sixty (60) days of discovering a breach of unsecured health information.

6. CHANGES TO THIS NOTICE

Anglican Care reserves the right to change the terms of this Notice at any time. When material changes are made, we will:

• Post the revised Notice on anglicancare.org/privacy
• Notify all Members by email at least thirty (30) days before the effective date
• Update the version number and effective date on the cover page
• Provide a paper copy of the revised Notice upon request

The revised Notice will be effective for all health information the Ministry maintains, regardless of when it was collected.

7. CONTACT INFORMATION

If you have questions about this Notice, wish to exercise any of your rights, or need to file a complaint, you may contact us at:

Privacy Officer: Anglican Care, Attn: Privacy Officer, [Ministry Address]

Email: privacy@anglicancare.org

Website: anglicancare.org/privacy

U.S. Dept. of Health & Human Services: 200 Independence Ave SW, Washington, DC 20201 | hhs.gov/ocr

8. ACKNOWLEDGMENT OF RECEIPT

By signing below, the Member acknowledges that they have received and reviewed the Anglican Care Notice of Privacy Practices. The Member understands that this Notice describes how the Ministry may use and disclose their health information and the rights they have regarding that information. The Member understands that the Ministry may amend this Notice from time to time and that the most current version will be available at anglicancare.org/privacy.

The Member further acknowledges that Anglican Care is a Health Care Sharing Ministry and not a licensed insurance company or a “covered entity” under HIPAA, but that the Ministry voluntarily adheres to the privacy standards described in this Notice as a matter of best practice and Member transparency.

Member Name (printed): ____________________________________________________________	Member Name (printed): ____________________________________________________________
Member Signature: ________________________	Date: ________________
Membership ID: _______________________	Program Level: ________________

For Ministry Use Only — If signed by a personal representative:

Representative Name: ____________________	Relationship: ____________________
Representative Signature: _________________	Date: ____________________

“The prudent keep their knowledge to themselves, but the hearts of fools pour out folly.” — Proverbs 13:16