Privacy Notice

PRIVACY NOTICE

Medicaid Resource Partners LLC

Proposed Effective Date: 09/01/2026

Medicaid Resource Partners LLC ("MRP," "we," "us," or "our") respects the privacy and confidentiality of personal information provided to us in connection with our administrative Medicaid support services. This Privacy Notice describes, at a general level, the types of information MRP may receive, how that information may be used and disclosed, and the safeguards MRP maintains to protect confidential information.

1. Scope of This Notice

This notice is MRP’s general organizational privacy notice and is not a HIPAA Notice of Privacy Practices. It is intended to describe MRP’s general privacy practices for information received through its website, Microsoft Forms, secure document-submission methods, business communications, and service relationships.

This notice is not intended to replace any Business Associate Agreement, service agreement, authorization, consent, or other legal or contractual requirement applicable to a particular engagement.

2. Information We May Receive

MRP may receive information from healthcare facilities, individuals, residents or patients, family members, authorized representatives, government agencies, and other authorized parties in connection with requested services.

Information may include identifying and contact information; facility and case information; Medicaid, insurance, financial, or eligibility-related information and documentation; and other information reasonably necessary to perform authorized administrative services. Depending on the circumstances, information received by MRP may include protected health information (PHI).

3. How MRP Uses Information

MRP may use information as reasonably necessary to provide authorized administrative services, including Medicaid eligibility pre-screening and administrative triage, Medicaid application assistance, renewal or redetermination assistance, documentation coordination, case-status follow-up, and related administrative support.

MRP may also use information to communicate with healthcare facilities, individuals, authorized representatives, government agencies, and other authorized parties as appropriate to the requested services; maintain business and compliance records; protect the security and integrity of MRP systems; and comply with applicable legal, regulatory, and contractual obligations.

4. Protected Health Information

When MRP is acting on behalf of a healthcare organization subject to HIPAA and the services involve protected health information (PHI), MRP handles PHI pursuant to the applicable Business Associate Agreement (BAA) and applicable law. MRP’s obligations with respect to PHI are governed by the role, scope, and requirements established by the applicable BAA and law.

MRP handles PHI within the scope of the authorized services and consistent with the applicable BAA and law.

5. Electronic Information and Secure Submissions

MRP may use Microsoft 365 services, including Microsoft Forms and OneDrive for Business, to receive, maintain, and process information electronically.

Healthcare facilities and other authorized users should submit sensitive documents only through secure submission methods designated by MRP. Users should not include passwords or other information that is not necessary for the requested service.

6. Disclosure of Information

MRP does not sell personal information or PHI.

MRP may disclose information when reasonably necessary to perform authorized services; at the direction or authorization of the individual, authorized representative, or healthcare organization; to vendors or service providers that support MRP’s operations where appropriate contractual and security protections are in place; or when required or permitted by applicable law. Where PHI is involved, such arrangements are maintained consistent with any applicable BAA obligations and applicable law.

7. Information Security

MRP maintains administrative, technical, and physical safeguards designed to protect confidential information against unauthorized access, use, alteration, loss, or disclosure.

No electronic system or method of transmission can be guaranteed to be completely secure. MRP evaluates its administrative and technology practices as appropriate for its operations and the sensitivity of the information it handles.

8. Information Retention and Disposal

MRP retains information for as long as reasonably necessary to provide authorized services, satisfy contractual and business requirements, and meet applicable legal or regulatory obligations. Information is disposed of using methods appropriate to the sensitivity of the information.

9. Third-Party Service Providers

MRP may use third-party service providers to support business operations. When such providers handle confidential information on MRP’s behalf, MRP seeks to use appropriate contractual, privacy, and security protections consistent with the services being provided.

10. Privacy Questions

Questions concerning this Privacy Notice or MRP’s privacy practices may be directed to the contact below.

Organization

Medicaid Resource Partners LLC

Attention

Privacy Contact

Email

sandy@medicaidresourcepartners.com

Website / Privacy URL

https://medicaidresourcepartners.com/privacy-notice

11. Changes to This Privacy Notice

MRP may update this Privacy Notice periodically to reflect changes in its services, technology, legal requirements, or privacy practices. The effective date displayed at the top of the published notice will indicate when the notice was most recently updated.