Legal

Notice of Privacy Practices (HIPAA)

How your protected health information is used and disclosed when you request a TrueDx second opinion, and the rights you have over it.

Draft reviewed August 21, 2026 — not an effective Notice of Privacy Practices

Our commitment

TrueDx is required by law to maintain the privacy of your protected health information ("PHI"), to provide you with this notice describing our legal duties and privacy practices, and to notify you if your unsecured PHI is breached.

How we may use and disclose your information

We use and disclose PHI for the following purposes:

  • Treatment-related second opinion: to obtain your specimen, slides, or scans from the originating lab, and to provide them to the reviewing pathologist
  • Payment: to bill for the second-opinion service
  • Healthcare operations: for quality review of the second-opinion process and credentialing of network pathologists
  • As required by law: when disclosure is required by a court order, public health authority, or other legal obligation

We do not use or disclose your PHI for marketing purposes, and we do not sell PHI, without your written authorization.

Your rights

You have the right to: request a copy of your PHI; request corrections to your PHI; request a list of certain disclosures we've made; request restrictions on certain uses or disclosures; request confidential communications; and receive a paper copy of this notice at any time. To exercise any of these rights, contact us at the address below.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with TrueDx directly, or with the U.S. Department of Health and Human Services, Office for Civil Rights. Filing a complaint will not affect the care or service you receive.

Effective date and changes

We reserve the right to change the terms of this notice and to make the revised notice effective for PHI we already hold, as well as PHI we receive in the future. The current notice will always be available on this page.

This page is a structural placeholder modeled on a standard HIPAA Notice of Privacy Practices. It is not a substitute for a compliance review. Before publishing, have a healthcare attorney or compliance officer confirm this notice matches your actual operations, identifies the covered entity and privacy contact, supplies an effective date, and includes any language required for substance-use-disorder records under the HIPAA/Part 2 rules effective February 16, 2026.