Consumer Health Data Privacy Policy

Effective date: November 2, 2026

This policy explains how Cognitive Diagnostic Associates (“CDA,” “we,” “us”) collects, uses, and shares consumer health data as defined in Washington's My Health My Data Act (RCW 19.373) and Nevada's consumer health data privacy law (Senate Bill 370, 2023). It supplements our Privacy Policy. In this policy, “consumer health data” means personal information that is linked or reasonably linkable to a consumer and that identifies the consumer's past, present, or future physical or mental health status.

Consumer health data we collect

  • Information about a student's (or an adult client's) disabilities, diagnoses, and suspected disabilities.
  • Special education and Section 504 information, such as eligibility categories, IEP or 504 status, and the major life activities and bodily functions affected.
  • Concerns and comments you describe in our consultation request form or tell our staff.
  • IEPs, evaluation reports, Prior Written Notice letters, and other records you upload or authorize us to obtain.
  • Information we gather and create when we conduct an evaluation, such as test results, observations, and evaluation reports.

Why we collect and use it

  • To respond to your consultation request and determine how we can help.
  • To request, arrange, and carry out Independent Educational Evaluations and other evaluations you ask for, including coordinating district funding when you authorize it.
  • To prepare evaluation reports and recommendations, and to provide expert testimony when we are engaged to do so.
  • To communicate with you, schedule appointments, and keep required records.
  • To comply with the law and protect the safety and security of our services.

We collect and use consumer health data only as necessary to provide the services you request, or with your consent.

Sources of consumer health data

  • You, or the parent, guardian, or authorized representative acting for a student.
  • School districts, public agencies, and other providers, when you authorize us to request records from them.
  • Our evaluators, during an evaluation.

Consumer health data we share, and with whom

We share consumer health data only as necessary to provide the services you request, with your consent, or as required by law. Categories of recipients:

  • Our evaluators and staff who need it to provide your services.
  • School districts and public agencies, when you authorize it, to request, arrange, fund, or carry out an evaluation.
  • Attorneys or others you ask us to work with.
  • Service providers (processors) that host, store, or transmit information for us under contract, such as our website host, WordPress.com (Automattic Inc.), our team messaging tool, Slack (Slack Technologies, LLC), which receives questions sent through our website chat button, and our email and file storage providers.
  • Courts, hearing officers, or government agencies, when required by law or legal process.

We do not share consumer health data with affiliates, and we do not sell consumer health data.

Website advertising tools. Our website uses Google Ads and the TikTok Pixel. When you submit a consultation request, Google Ads is told that a request was submitted so we can measure our advertising; the answers you type into the form, including any health information, are not sent to Google or TikTok. You can turn these tools off on our Your Privacy Choices page or by using Global Privacy Control.

Your rights

If you are a Washington or Nevada consumer, you have the right to:

  • Confirm whether we collect, share, or sell your consumer health data, and access that data.
  • Get a list of the third parties and affiliates with which we have shared or sold your consumer health data, and contact information for those third parties.
  • Withdraw your consent to our collection and sharing of your consumer health data.
  • Have your consumer health data deleted.

We will not discriminate against you for exercising these rights. A parent or guardian may make requests for a minor child.

How to make a request

Use the request form on our Your Privacy Choices page, email admin@cdacompany.com, call (949) 478-4484, or write to Privacy Officer, Cognitive Diagnostic Associates, 4695 MacArthur Ct., 11th Floor, Newport Beach, CA 92660. We may need to verify your identity before we act on your request. We will respond within 45 days, which may be extended by another 45 days when reasonably necessary; we will tell you if we need more time. Some information may be kept when the law requires it, such as records we must retain as evaluators.

Appeals. If we decline to act on your request, you may appeal by emailing admin@cdacompany.com with “Consumer Health Data Appeal” in the subject line. We will respond to your appeal in writing within 45 days. If we deny your appeal, you may contact the Washington State Attorney General at www.atg.wa.gov or the Nevada Attorney General at ag.nv.gov.

Changes to this policy

We will update this policy when our practices change and post the new effective date above.