X. EXHIBITS X. EXHIBITS EXHIBIT P - Privacy Notice (“HIPPA”) NOTICE OF PRIVACY PRACTICES AND CONSENT This notice is being provided in connection with the Health Insurance Portability and  Accountability Act of 1996 (“HIPAA”). Although ATP is not bound to comply with all  aspects of HIPAA, ATP is committed to making sure that players are aware of the  manner in which personal health information will be used, maintained and released.  THIS NOTICE DESCRIBES HOW THE ATP TOUR (the “ATP”; FOR THE PUR- POSES OF THIS EXHIBIT, INCLUDED IN THE DEFINITION OF “ATP” SHALL BE  NON-ATP EMPLOYED STAFF AT CHALLENGER TOURNAMENTS WHO PRO- VIDE MEDICAL ASSISTANCE) MAY USE AND DISCLOSE YOUR MEDICAL IN- FORMATION, AND HOW YOU CAN GAIN ACCESS TO YOUR PERSONAL AND  PROTECTED HEALTH INFORMATION (“PHI”); PLEASE REVIEW CAREFULLY. ATP is committed to maintaining the confidentiality of your PHI, in accordance with  applicable federal and applicable state privacy laws, as well as our own company  privacy policies. This notice describes how we may use and disclose your PHI and  explains your legal rights regarding PHI. This notice also describes certain risks as - sociated with Players and others utilizing a Physiotherapist Treatment Room or other  facility. When we use the term “PHI”, we mean information about you, including any health  care payment, medical or demographic information that can reasonably be used to  identify you and relates to your medical history. This includes, but is not limited to,  injuries, illnesses, sickness, diseases, health care providers and laboratory and other  test results. This notice is effective on January 1, 2010. The terms of this notice apply to all  records containing your PHI that are created or retained by ATP. We reserve the  right to revise or amend this notice. Any revision or amendment to this notice will be  effective for all of your records that ATP has created or maintained in the past, and for  any of your records that ATP may create or maintain in the future. You will find this  and any revised or amended notices posted at ATP’s offices in Ponte Vedra Beach,  Florida in a visible location, as well as on the PlayerZone website located at: https:// atp-playerzone.com. HOW ATP MAY USE AND DISCLOSE YOUR PHI In order to provide you with certain health and other services, we may create or  receive PHI relating to you. In coordinating and administering services, we may use  and disclose your PHI in various ways, including: 1) Treatment . ATP may use your PHI to assist in your treatment by providers. For  example, a Physiotherapist or the medical director of a tournament may access  your PHI to understand and better treat your condition. 2) Health Care Operations . We may use and disclose PHI during the course of  managing our business. For example, we may use your PHI to internally evalu - ate the quality of care that you received, to conduct internal company audits, for  data information systems management, to conduct company cost management  308 309 assessments, for evaluations and for general business planning purposes. 3) Payment.  Your PHI may be requested by a third party for billing purposes, with  regard to services provided to you, to conduct utilization and medical necessity  reviews, to coordinate care with your health care insurance company or carrier, to  calculate cost sharing amounts, and to respond to audits or reviews by federal or  state government agencies, insurance companies or carriers.  4) Qualified Service Organizations and Business Associates. We may share  your PHI with qualified service organizations, national federations or business  associates who provide services to ATP. In each case, these entities will have  agreements with us to safeguard and keep confidential your PHI. We will only  share the minimum PHI necessary for these entities to carry out their duties to  ATP. 5) Patient Information Purposes.  We may use your PHI to inform you about po - tential treatment alternatives or options, and to notify you of other health related  benefits and services that may be of interest to you. 6) Disclosures in Accordance with Florida Law, Required by Law and Govern- ing Law.  By signing the Player’s Consent and Agreement to the ATP Official Rulebook, you  are agreeing that, for purposes of medical consent and release of records, the  laws of the State of Florida shall govern. Certain disclosures of your PHI may  be required by laws. These include, but are not limited to: (A) reports to feder - al, state or local law enforcement in connection with crime or threats to commit  crime; (B) reports to appropriate state agencies in connection with reporting  child abuse or neglect; (C) reports in connection with medical emergencies, for  the purpose of treating conditions which pose an immediate threat to the health  of any individual or which require immediate medical attention; (D) reports in  response to court orders, if you are involved in a lawsuit or similar proceeding,  or in response to a subpoena if you give us written authorization to release your  PHI; (E) reports in connection with public health risk management (e.g., reporting  of adverse drug reactions, notifications for recalled products or devices, required  reports for certain diseases). 7) Serious Threats to Health or Safety.  We may disclose your PHI as necessary  to reduce or prevent a serious threat to your health and safety, or the health and  safety of another individual or the public. Under these circumstances, we will  only make disclosures to such persons or organizations able to help prevent such  threat. In all other situations, we will ask for your written authorization before disclosing  your PHI. If you have given us an authorization, you may revoke it at any time, if  we have not already acted on it. Revocation of consent is effective upon receipt  of written notice, mailed via certified mail, return receipt requested and addressed  to Chief Player Officer, 201 ATP Tour Boulevard, Ponte Vedra Beach, Florida  32082, with a copy (sent certified mail, return receipt requested) to Jeffrey T. Reel,  201 ATP Tour Boulevard, Ponte Vedra Beach, Florida 32082. Revocation of this  consent does not affect the validity of any prior use or disclosure of your PHI. You  further understand that your right to revoke this authorization shall not serve to  excuse any failure by you to comply with the provisions of the ATP Tour Official  Rule Book covering your affiliation with ATP Tour, or any other rule or agreement  that may govern the terms and condition of your participation in tournaments.