In accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), Reach will follow the guidelines set forth in the Notice of Privacy Practices. As indicated in the Notice of Privacy Practices, Reach will not share any Protected Health Information regarding your involvement with the EAP with anyone, including your employer and your family members, without your prior knowledge and explicit consent. The exception to this is by a court order, the specific instances identified in the Notice of Privacy Practices, or the following situations that are mandated by both Federal and State law based on the professional judgment of your EAP Counselor:   (1) Threat of serious harm to self or others (2) Suspected child or elder abuse or neglect (3) A medical emergency   Ask your counselor to discuss these circumstances if you have any questions about confidentiality. Quality Control Review of the EAP may be conducted by an independent auditor, but personal information will never be disclosed to your employer without your explicit consent. Your use of the EAP is voluntary.