HIPAA AUTHORIZATION FOR USE AND DISCLOSURE OF PROTECTED HEALTH INFORMATION

This is an authorization for the use and disclosure of Protected Health Information ("PHI") in compliance with applicable privacy laws, including the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") as amended by the Health Information Technology for Economic and Clinical Health Act (collectively, "Applicable Privacy Laws").

ResMed Corp., and its affiliated entities (collectively, "ResMed"), interacts with certain healthcare providers, including to provide services to you (including but not limited to clinical software or medical devices that may be used or recommended by your healthcare provider). By agreeing to this voluntary HIPAA Authorization, you authorize all healthcare providers that interact with ResMed to release your PHI to ResMed for the purpose outlined in Section 2 of this Authorization. You may decline to provide this Authorization.

1. Information to be used and disclosed

By agreeing to this HIPAA authorization, you authorize your healthcare provider to release your PHI to ResMed. Your PHI may include the following types of information:

• Your name, account information, and demographic information (date of birth, address, phone number, email, login information).
• Health information, including your complete health record (treatment records, diagnoses, prescriptions, diagnostic testing results).
• Sleep, PAP, respiratory support, or wearable device data (physiological data, user-provided data, feedback, biometric information, usage, adherence data).
• Insurance information (health insurance or benefits coverage).
• Usage and engagement data (survey responses).
• Photographs, including facial or bodily images, scans, measurements.
• Potentially sensitive health information (mental health records, communicable disease information, drug/alcohol abuse treatment records, genetic information).

2. Purpose

PHI received by ResMed under this HIPAA authorization will be used, combined, retained, and disclosed by ResMed in accordance with this authorization for the following purpose:

• Incorporating health information into ResMed accounts to facilitate treatment and care coordination.
• Customizing products and services to you based on your needs and preferences.
• Providing additional resources or information that may be of interest or benefit to you.
• Tracking your use of ResMed products and services.
• Assessing the performance of ResMed products and services.
• Learning how your treatment is covered by insurance.
• Generating aggregate analytics and analyzing device or app interactions.
• Conducting market research, machine learning, and development of product offerings.
• Contacting you about optional ResMed programs, studies, or market research.
• De-identifying and aggregating data for any legal purpose.

3. Marketing

By accepting this authorization, you agree that ResMed may use your information for marketing and promotional purposes, such as sending marketing communications and information about ResMed services, market research, technologies, and new offerings. You can manage your communication preferences.

4. Your rights

This HIPAA authorization is voluntary and may be declined. However, some ResMed support services may not be available if you decline. ResMed and healthcare providers cannot condition medical treatment, payment, or eligibility for healthcare benefits on this authorization.

To revoke this authorization, contact ResMed in writing at HIPAA-Authorization@resmed.com. Revoking authorization will not affect prior use or disclosure of PHI.

You acknowledge that entities receiving your PHI under this authorization may not be bound by Applicable Privacy Laws and may share the information without your permission.

5. Expiration

This authorization remains in effect while you obtain or use ResMed services and for six years thereafter, or until revoked.

By signing this Authorization, you agree to authorize healthcare providers to release your PHI to ResMed for the stated purposes. You understand how to revoke or obtain a copy of this authorization.

RH-803172/1 2025-02