Legal Notices for 2025 Request for Confidential Communications – You have the right to request that communications regarding your PHI be made by alternative means or at alternative locations. For example, you may request that messages not be left on voice mail or sent to a particular address. The Plan is required to accommodate reasonable requests if you inform the Plan that disclosure of all or part of your information could place you in danger. The Plan may grant other requests for confidential communications in its sole discretion. Requests for confidential communications must be in writing, signed by you or your personal representative, and sent to the Privacy Office at the address below. Right to a Copy of the Notice – You have the right to a paper copy of this Notice upon request by contacting the Privacy Office at the telephone number or address below. Right to Notice of Breach - You have the right to receive notice if your PHI is improperly used or disclosed as a result of a breach of unsecured PHI. Complaints – If you believe your privacy rights have been violated, you can file a complaint with the Plan through the plan administrator in writing at the address below. You may also file a complaint in writing with the Secretary of the U.S. Department of Health and Human Services in Washington, D.C., within 180 days of a violation of your rights. There will be no retaliation for filing a complaint. FOR FURTHER INFORMATION If you have questions or need further assistance regarding this Notice, you may contact our plan administrator. Page 7 | DePauw University | Plan Year 2025 This Compliance Overview is not intended to be exhaustive nor should any discussion or opinions be construed as legal advice. Readers should contact legal counsel for legal advice.