Teladoc says it uses and shares PHI only as allowed by law. Treatment, payment and healthcare operations are identified purposes, subject to the notice’s specific authorization and sensitive-information rules.
Details not recorded for this card
Supporting quotations
Teladoc Health may use and share your PHI as allowed by law.
We use and share your PHI only as allowed by law, including for the following purposes:
Teladoc uses and shares PHI to provide medical care and services, including with providers involved in your care and making prior visit information available for continuity. Part 2 information remains subject to the consent and proceeding protections separately described in this notice.
Details not recorded for this card
Supporting quotations
We may use and share your PHI for treatment. This helps us provide care to you.
We use and share your PHI to provide medical care and services to you. For example, this may include sharing information with healthcare providers involved in your care and making prior visit information available to support continuity of care.
Qualifications & exceptions
For medical care and continuity of care; special Part 2 rules still apply.
Cross-references
narrowed by (model-proposed): Specific consent limits use of Part 2 information — Part 2 information received through specific consent may be used or disclosed only as that consent permits, narrowing general treatment use.
Sharing & Disclosure · Permission or license
Affiliated covered entities may share PHI internally
The notice covers Teladoc Health, Inc. and related entities operating as one HIPAA Affiliated Covered Entity, including Livongo, Catapult, Best Doctors, HealthiestYou, myStrength and Advance Medical. These entities may share PHI with each other for treatment, payment and healthcare operations. Catapult also maintains a separate, aligned notice; its contents are not supplied here.
Details not recorded for this card
Supporting quotations
Teladoc Health includes related companies that may work together under HIPAA.
Teladoc Health, Inc. and its affiliated companies — including, but not limited to, Livongo Health, Inc., Catapult Health, LLC, Best Doctors, Inc., HealthiestYou, Inc., myStrength, Inc., and Advance Medical, Inc. — operate together as a single Affiliated Covered Entity (ACE) under the Health Insurance Portability and Accountability Act (HIPAA).
As an ACE, these entities may use and share protected health information (PHI) with each other for treatment, payment, and healthcare operations.
Catapult Health, LLC is part of the ACE but maintains a separate, aligned
Qualifications & exceptions
Internal sharing is for treatment, payment and healthcare operations.
Independent medical groups participate in a joint care arrangement
The notice also covers Teladoc Health Medical Group, P.A. and affiliated professional entities. Although independent provider organizations, they join Teladoc in an Organized Health Care Arrangement to integrate care, improve quality and conduct certain joint operations. PHI sharing among participants is permitted by HIPAA to support care and related operations. References to Teladoc or “we” include covered ACE participants and these OHCA medical groups.
Details not recorded for this card
Supporting quotations
These medical groups are independent provider organizations, but they participate with Teladoc Health in a HIPAA-defined Organized Health Care Arrangement (OHCA).
PHI may be shared among OHCA participants as permitted by HIPAA to support your care and related operations.
When this Notice refers to “Teladoc Health,” “Teladoc,” “we,” “us,” or “our,” it means Teladoc Health, Inc., the affiliated ACE participants covered by this Notice, and the medical groups that participate in the OHCA described above.
Qualifications & exceptions
Sharing must be HIPAA-permitted and support care and related operations.
Some health-information exchange participation may be opted out of
Teladoc participates in secure electronic health information exchanges and clinical data networks for treatment, care coordination and operations as permitted by law. Depending on state law and exchange policies, you may opt out of certain exchanges; the notice provides a request link and identifies Zus Health as the connectivity provider. Linked Zus policies are not supplied.
Details not recorded for this card
Supporting quotations
Depending on state law and network rules, you may be able to opt out of some exchange activities.
Depending on applicable state law and exchange policies, you may be able to opt out of participation in certain exchanges.
Exchange connectivity is supported by Zus Health, a third-party interoperability provider.
Qualifications & exceptions
Availability depends on applicable state law and exchange policies.
Certain marketing and any PHI sale require written authorization
Teladoc will not use or disclose PHI for marketing requiring HIPAA authorization, or sell PHI, without your written authorization. Certain treatment-alternative, health-product or service, and care-coordination communications may be lawful without authorization.
Details not recorded for this card
Supporting quotations
Teladoc Health will not use or share your PHI for marketing that requires HIPAA authorization unless you give written authorization. Teladoc Health will not sell your PHI without your written authorization.
Certain communications about treatment alternatives, health-related products or services, or care coordination activities may be permitted by law without authorization.
Qualifications & exceptions
Some lawful healthcare communications do not require authorization.
Health-information exchanges support care and operations
Teladoc participates in secure electronic exchanges and clinical data networks to support treatment, care coordination and healthcare operations as permitted by law. You may be able to opt out of certain exchanges depending on state law and exchange policies. The notice links a Teladoc opt-out form and Zus opt-out/opt-in forms, and identifies Zus Health as the third-party connectivity provider. The linked Zus notice and form contents are not supplied.
Details not recorded for this card
Supporting quotations
To support treatment, care coordination, and healthcare operations, Teladoc Health participates in secure electronic health information exchanges (HIEs) and clinical data networks as permitted by law.
Depending on applicable state law and exchange policies, you may be able to opt out of participation in certain exchanges.
Exchange connectivity is supported by Zus Health, a third-party interoperability provider.
Depending on state law and network rules, you may be able to opt out of some exchange activities.
Qualifications & exceptions
Participation is permitted by law; opt-out availability depends on state law and exchange policies.
Not stated here
Linked Zus notice and form contents are not supplied.
Marketing requiring HIPAA authorization needs written permission
Certain PHI uses and disclosures require written authorization. Teladoc will not use or disclose PHI for marketing that requires authorization under HIPAA without it. Law may permit some communications about treatment alternatives, health-related products or services, or care coordination without authorization.
Details not recorded for this card
Supporting quotations
Certain uses and disclosures of your protected health information (PHI) are permitted only with your written authorization.
We will not use or disclose your PHI for marketing purposes that require authorization under HIPAA without your written authorization. Certain communications about treatment alternatives, health-related products or services, or care coordination activities may be permitted by law without authorization.
Qualifications & exceptions
The requirement concerns marketing that requires authorization under HIPAA; listed lawful communications may be exempt.
Teladoc will not sell your PHI without written authorization. The notice defines a PHI sale as disclosure for which Teladoc receives payment directly or indirectly in exchange for the information, as defined by HIPAA.
Details not recorded for this card
Supporting quotations
We will not sell your PHI without your written authorization. A sale of PHI means a disclosure of PHI where we receive payment directly or indirectly in exchange for the information, as defined by HIPAA.
Qualifications & exceptions
Sale has the HIPAA-based meaning stated in the notice.
Cross-references
qualified by (model-proposed): You may revoke authorization in writing at any time — A written authorization to sell PHI can be revoked prospectively; uses or disclosures already made in reliance are unaffected.
Sharing & Disclosure · User right or choice
You may revoke authorization in writing at any time
You may revoke a previously given authorization at any time by submitting a written revocation. It will not undo uses or disclosures already made in reliance on that authorization.
Details not recorded for this card
Supporting quotations
If you provide an authorization, you may revoke it at any time by submitting a written revocation. A revocation will not apply to uses or disclosures already made in reliance on your authorization.
Qualifications & exceptions
Written revocation is required and does not affect prior reliance.
qualifies (model-proposed): Selling PHI requires written authorization — A written authorization to sell PHI can be revoked prospectively; uses or disclosures already made in reliance are unaffected.
Sharing & Disclosure · Permission or license
General Part 2 consent can support treatment, payment and operations
If Teladoc receives Part 2 protected information through your general consent to a Part 2 Program for treatment, payment or healthcare operations, it may use and disclose it for those purposes as described in the notice. Using it or related testimony in a proceeding against you still requires written consent or a qualifying court order.
Details not recorded for this card
Supporting quotations
If we receive Part 2 protected information through a general consent you provide to a Part 2 Program for treatment, payment, or health care operations, we may use and disclose that information for those purposes as described in this Notice.
In no event will we use or disclose Part 2 protected information, or testimony describing such information, in any civil, criminal, administrative, or legislative proceeding against you without your written consent or a court order that meets applicable legal requirements.
Qualifications & exceptions
Received through the described general consent; separate proceeding restrictions apply.
Cross-references
qualifies (model-proposed): PHI use and sharing are limited by law — General consent from a Part 2 Program permits the stated treatment, payment and operations uses while the separate proceeding protections remain.
If Teladoc receives Part 2 protected information through a specific consent you give to Teladoc or another third party, it will use and disclose that information only as that consent permits. The separate written-consent or qualifying-court-order rule also applies to proceedings against you.
Details not recorded for this card
Supporting quotations
If we receive Part 2 protected information through a specific consent you provide to us or another third party, we will use and disclose that information only as permitted by that consent.
In no event will we use or disclose Part 2 protected information, or testimony describing such information, in any civil, criminal, administrative, or legislative proceeding against you without your written consent or a court order that meets applicable legal requirements.
Qualifications & exceptions
Use and disclosure are limited by the specific consent and proceeding protections.
Cross-references
narrows (model-proposed): PHI supports medical care and continuity — Part 2 information received through specific consent may be used or disclosed only as that consent permits, narrowing general treatment use.
Law may allow or require public-health and safety disclosures
The notice says PHI sharing may be required or allowed by law for public health and safety, reporting abuse or neglect, and preventing serious threats to health or safety. Listing these purposes does not say disclosure occurs in every case. Special Part 2 consent and proceeding protections continue to apply where relevant.
Details not recorded for this card
Supporting quotations
We may be required or allowed by law to share your PHI in certain situations, including:
Public health and safety activities
Reporting abuse or neglect
Preventing serious threats to health or safety
Qualifications & exceptions
Only where required or allowed by law; special Part 2 protections remain applicable.
Sharing & Disclosure · Permission or license
Other lawful disclosures include compensation, death, donation and research matters
The notice lists workers’ compensation matters; limited instances involving coroners, medical examiners and funeral directors; organ donation and approved research; and IRB-approved research among situations where law may require or allow PHI sharing. These are conditional permissions, subject to applicable law and the notice’s special Part 2 protections.
Details not recorded for this card
Supporting quotations
Workers’ compensation matters
Limited instances with coroners, medical examiners, and funeral directors
Organ donation and approved research
Institutional Review Board (IRB)-approved research
Qualifications & exceptions
Only where required or allowed by law; coroner-related instances are limited.
Sharing & Disclosure · User right or choice
Paid-in-full care can be withheld from health-plan payment disclosures
Teladoc generally need not agree to requested PHI restrictions. It must agree to a request not to disclose PHI to a health plan for payment when you or someone on your behalf has paid in full. Submit privacy-rights requests in writing through the portal or by mail; verbal requests are not processed.
Details not recorded for this card
Supporting quotations
Note, Teladoc Health is not required to agree to a requested restriction, except where you request that we not disclose your PHI to a health plan for payment purposes and you (or another individual on your behalf) have paid in full.
To exercise your privacy rights, you must submit your request in writing through our Privacy Rights Portal or by mail, as described above. For security and identity verification purposes, requests are not processed verbally.
Qualifications & exceptions
Requires a request, payment in full and a health-plan disclosure for payment purposes.
Cross-references
exception to (model-proposed): PHI supports billing and payment collection — The paid-in-full request is the notice’s mandatory exception to discretionary restrictions on health-plan payment disclosures.