We may disclose Personal Data collected through MSK MyChart as described in the sections above, for the reason(s) provided to you at the time we collect it, with your authorization or consent, and in the following ways: Patients and Proxy Account Users. If a Patient chooses to give other people access to their MSK MyChart account as Proxy account users, the Proxy account users can, depending on their access permissions as selected by the Patient, view certain parts of the Patient’s medical record that are available through MSK MyChart, such as the Patient’s treatment, test results, diagnostic and billing information, as well as other information available in the Patient’s MSK MyChart account. Third-Party Service Providers. We may disclose Personal Data to vendors who perform services on our behalf, including, but not limited to helping us manage MSK MyChart and your medical records, manage our communication channels and conduct analytics, providers involved in hosting and monitoring MSK MyChart, payment processors, and pharmacy providers.  Vendors with whom we share your Personal Information that is PHI are called business associates.  We will have a written contract with these business associates that makes sure they also protect the privacy of your Personal Information. MSK MyChart is developed by Epic Systems Corporation; please refer to Epic’s Mobile Application Privacy Policy for Patients for more detailed information about the limited ways they may interact with your information to make your use of MSK MyChart possible. Affiliates.  We may disclose Personal Data between and among MSK and our current and future parents, affiliates, subsidiaries and other companies under common control and ownership.  For example, MSK and MMC participate in an Organized Health Care Arrangement (OHCA), which allows MSK and MMC to share Personal Data collected in MSK MyChart with each other to carry out treatment, payment, and joint health care operations activities that relate to the OHCA. Legal Process, Safety and Terms Enforcement.  We may disclose your Personal Data to legal or government regulatory authorities in response to a search warrant, subpoena, court order or other request for such information or to assist in investigations.  We may also disclose your Personal Data to third parties in connection with claims, disputes or litigation, when otherwise required by law, if we determine such disclosure is necessary to protect the health and safety of us or our users or to enforce our legal rights or contractual commitments that users have made. Business Transfers. We may disclose Personal Data as a part of a corporate business transaction, such as a merger, acquisition, reorganization, divestiture, dissolution, joint venture or financing, bankruptcy or sale of all or a portion of our assets.