Confidential Information The protection of confidential, privileged, and/or proprietary business information is vital to Lucy Corr’s business operations. Confidential information is any and all information disclosed to or known by you because of your employment with Lucy Corr, which is not generally known to people outside of Lucy Corr about its business. All information, including residents’ personal and protected health information (PHI), financial, accounting, and personnel information, including but not limited to policies and procedures, may constitute confidential information, and may not be disclosed to anyone, even after the employment relationship ends. All such information – whether it is verbal, written, faxed, photographic, or electronic – is considered as privileged and confidential and should be used and maintained in such a way that its privacy and safety are ensured. Furthermore, work-related and/or resident information should not be discussed in open areas such as hallways, elevators, break areas, cafeteria, etc. Lucy Corr is committed to complying with the Health Insurance Portability & Accountability Act (HIPAA), which is a federal law that requires all “covered entities” to protect health information. As such, Lucy Corr employees must: • Protect the privacy rights of all individuals • Safeguard information resources entrusted to them • Understand and follow established procedures and practices • Report potential problems immediately An employee who improperly uses or discloses confidential business information or PHI will be subject to disciplinary action up to and including termination of employment and legal action, even if he or she does not actually benefit from the disclosed information.