Harmony Heights Confidentiality & Non-Disclosure Agreement

This Confidentiality & Non-Disclosure Agreement ("Agreement") is entered into between Harmony Heights Home Health Services LLC ("Harmony Heights" or the "Company") and the undersigned employee, contractor, temporary worker, volunteer, or other workforce member ("Workforce Member"). Because the Workforce Member may have access to sensitive client, employee, business, and health information, continued access is conditioned on compliance with this Agreement and all applicable Company privacy and security policies.

1. Purpose and Duty of Confidentiality
The Workforce Member agrees to protect confidential information obtained through work for or with Harmony Heights and to use such information only for legitimate, authorized job duties. Confidential information may not be accessed, copied, discussed, photographed, transmitted, removed, retained, or disclosed for personal purposes or for any purpose not authorized by Harmony Heights.

2. Confidential Information "Confidential Information" includes information in any form - verbal, written, electronic, photographic, or otherwise - that is not generally available to the public and that relates to Harmony Heights, its clients, workforce, business partners, referral sources, or operations. Confidential Information includes, without limitation:

• Protected Health Information (PHI), medical information, diagnoses, medications, care plans, assessments, visit notes, treatment information, insurance information, and other client health information.
• Client names, addresses, telephone numbers, dates of birth, Social Security numbers, financial information, family information, schedules, service locations, and other personally identifiable information.
• Employee and applicant information, payroll information, background screening information, personnel records, credentials, disciplinary information, and other human-resources information.
• Company policies, procedures, training materials, pricing, contracts, referral information, marketing plans, financial information, passwords, access codes, system information, vendor information, and non-public business practices.
• Any other information identified as confidential or that a reasonable person would understand should be treated as private or confidential.

3. HIPAA and Privacy Compliance When the Workforce Member receives or accesses PHI or other protected information, the Workforce Member must comply with HIPAA, applicable privacy laws, Company policies, and the minimum-necessary principle. The Workforce Member may access only the information needed to perform assigned duties and may disclose protected information only to authorized persons for permitted purposes.

4. Prohibited Conduct The Workforce Member agrees not to engage in any unauthorized use or disclosure of Confidential Information. Prohibited conduct includes, but is not limited to:

• Looking up records out of curiosity or accessing information about clients, coworkers, friends, relatives, or public figures without a work-related need.
• Discussing client or Company information in public areas, on social media, or with family members, friends, or other unauthorized persons.
• Taking photographs, screenshots, recordings, or videos of clients, client records, Company systems, or work-related documents without specific authorization.
• Sending Confidential Information through personal email, personal cloud storage, unapproved messaging applications, or other unapproved systems.
• Sharing passwords, allowing another person to use assigned credentials, or leaving systems or records unsecured.
• Removing original records or retaining copies of Confidential Information after the information is no longer needed for authorized work.

5. Information Security The Workforce Member will use reasonable safeguards to protect Confidential Information, including keeping paper records secure, locking or signing out of electronic systems when unattended, using only authorized devices and systems, maintaining password confidentiality, and following Company policies for remote work, electronic communication, document disposal, and secure storage.

6. Client Homes and Field Work When working in a client home or community setting, the Workforce Member will take special care to prevent unauthorized persons from viewing or hearing confidential information. Client records, schedules, phones, tablets, and other Company materials must not be left unattended or visible to persons who are not authorized to access them.

7. Incident and Breach Reporting The Workforce Member must immediately report any suspected or actual loss, theft, misdirection, unauthorized access, improper disclosure, phishing event, compromised password, missing device, or other privacy/security concern to Harmony Heights management. The Workforce Member must cooperate with any investigation, mitigation, notification, or corrective-action process required by the Company or applicable law.

8. Return and Destruction of Information Upon request, reassignment, leave, separation from employment, or the end of any relationship with Harmony Heights, the Workforce Member will promptly return all Company property and Confidential Information in the Workforce Member's possession or control. The Workforce Member will not keep copies except where retention is expressly authorized or legally required.

9. Duration of Obligation The duties in this Agreement begin when the Workforce Member first receives or accesses Confidential Information and continue during the relationship with Harmony Heights and after that relationship ends, for as long as the information remains confidential or protected by law.

10. Exceptions and Protected Rights This Agreement does not prohibit disclosures that are required by law, made to a government agency or regulator, or otherwise protected by applicable law. Nothing in this Agreement is intended to prevent the Workforce Member from reporting suspected legal violations, participating in an investigation, filing a charge or complaint, discussing wages or working conditions where legally protected, or exercising any other non-waivable legal right. When legally permitted, the Workforce Member should limit any disclosure to what is reasonably necessary.

11. Consequences of Violation Unauthorized access, use, or disclosure of Confidential Information may result in corrective action up to and including termination of employment or engagement, loss of system access, reporting to licensing or regulatory authorities when required, and other action permitted by law. Nothing in this section changes the at-will nature of employment where applicable or creates a guarantee of continued employment.

12. No Ownership or License Confidential Information and Company records remain the property of Harmony Heights or the applicable client or third party. This Agreement does not grant the Workforce Member any ownership interest, license, or continuing right to access or use Confidential Information outside authorized job duties.

13. Acknowledgment of Policies The Workforce Member acknowledges that this Agreement supplements, and does not replace, Harmony Heights policies regarding HIPAA, privacy, information security, records, social media, electronic communications, client rights, and professional conduct. The Workforce Member agrees to follow current Company policies and any lawful updates communicated by Harmony Heights.