## X. EXHIBITS 

## EXHIBIT P - Privacy Notice (“HIPPA”) 

This notice is being provided in connection with the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”). Although ATP is not bound to comply with all aspects of HIPAA, ATP is committed to making sure that players are aware of the manner in which personal health information will be used, maintained and released. 

## THIS NOTICE DESCRIBES HOW THE ATP TOUR (the “ATP”; FOR THE PUR- POSES OF THIS EXHIBIT, INCLUDED IN THE DEFINITION OF “ATP” SHALL BE NON-ATP EMPLOYED STAFF AT CHALLENGER TOURNAMENTS WHO PRO- VIDE MEDICAL ASSISTANCE) MAY USE AND DISCLOSE YOUR MEDICAL IN- FORMATION, AND HOW YOU CAN GAIN ACCESS TO YOUR PERSONAL AND PROTECTED HEALTH INFORMATION (“PHI”); PLEASE REVIEW CAREFULLY. 

ATP is committed to maintaining the confidentiality of your PHI, in accordance with applicable federal and applicable state privacy laws, as well as our own company privacy policies. This notice describes how we may use and disclose your PHI and explains your legal rights regarding PHI. This notice also describes certain risks as - sociated with Players and others utilizing a Physiotherapist Treatment Room or other facility. 

When we use the term “PHI”, we mean information about you, including any health care payment, medical or demographic information that can reasonably be used to identify you and relates to your medical history. This includes, but is not limited to, injuries, illnesses, sickness, diseases, health care providers and laboratory and other test results. 

This notice is effective on January 1, 2010. The terms of this notice apply to all records containing your PHI that are created or retained by ATP. We reserve the right to revise or amend this notice. Any revision or amendment to this notice will be effective for all of your records that ATP has created or maintained in the past, and for any of your records that ATP may create or maintain in the future. You will find this and any revised or amended notices posted at ATP’s offices in Ponte Vedra Beach, Florida in a visible location, as well as on the PlayerZone website located at: https:// atp-playerzone.com. 

In order to provide you with certain health and other services, we may create or receive PHI relating to you. In coordinating and administering services, we may use and disclose your PHI in various ways, including: 

1) Treatment . ATP may use your PHI to assist in your treatment by providers. For example, a Physiotherapist or the medical director of a tournament may access your PHI to understand and better treat your condition. 

2) Health Care Operations . We may use and disclose PHI during the course of managing our business. For example, we may use your PHI to internally evalu - ate the quality of care that you received, to conduct internal company audits, for data information systems management, to conduct company cost management 

## NOTICE OF PRIVACY PRACTICES AND CONSENT 

## HOW ATP MAY USE AND DISCLOSE YOUR PHI 

## X. EXHIBITS 

assessments, for evaluations and for general business planning purposes. 

3) Payment. Your PHI may be requested by a third party for billing purposes, with regard to services provided to you, to conduct utilization and medical necessity reviews, to coordinate care with your health care insurance company or carrier, to calculate cost sharing amounts, and to respond to audits or reviews by federal or state government agencies, insurance companies or carriers. 

4) Qualified Service Organizations and Business Associates. We may share your PHI with qualified service organizations, national federations or business associates who provide services to ATP. In each case, these entities will have agreements with us to safeguard and keep confidential your PHI. We will only share the minimum PHI necessary for these entities to carry out their duties to ATP. 

5) Patient Information Purposes.  We may use your PHI to inform you about po - tential treatment alternatives or options, and to notify you of other health related benefits and services that may be of interest to you. 

## 6) Disclosures in Accordance with Florida Law, Required by Law and Govern- ing Law. 

By signing the Player’s Consent and Agreement to the ATP Official Rulebook, you are agreeing that, for purposes of medical consent and release of records, the laws of the State of Florida shall govern. Certain disclosures of your PHI may be required by laws. These include, but are not limited to: (A) reports to feder - al, state or local law enforcement in connection with crime or threats to commit crime; (B) reports to appropriate state agencies in connection with reporting child abuse or neglect; (C) reports in connection with medical emergencies, for the purpose of treating conditions which pose an immediate threat to the health of any individual or which require immediate medical attention; (D) reports in response to court orders, if you are involved in a lawsuit or similar proceeding, or in response to a subpoena if you give us written authorization to release your PHI; (E) reports in connection with public health risk management (e.g., reporting of adverse drug reactions, notifications for recalled products or devices, required reports for certain diseases). 

7) Serious Threats to Health or Safety.  We may disclose your PHI as necessary to reduce or prevent a serious threat to your health and safety, or the health and safety of another individual or the public. Under these circumstances, we will only make disclosures to such persons or organizations able to help prevent such threat. 

In all other situations, we will ask for your written authorization before disclosing your PHI. If you have given us an authorization, you may revoke it at any time, if we have not already acted on it. Revocation of consent is effective upon receipt of written notice, mailed via certified mail, return receipt requested and addressed to Chief Player Officer, 201 ATP Tour Boulevard, Ponte Vedra Beach, Florida 32082, with a copy (sent certified mail, return receipt requested) to Jeffrey T. Reel, 201 ATP Tour Boulevard, Ponte Vedra Beach, Florida 32082. Revocation of this consent does not affect the validity of any prior use or disclosure of your PHI. You further understand that your right to revoke this authorization shall not serve to excuse any failure by you to comply with the provisions of the ATP Tour Official Rule Book covering your affiliation with ATP Tour, or any other rule or agreement that may govern the terms and condition of your participation in tournaments. 

