American Green Inc (ERBB)

[Sorbytech]

The provider is JotForms. And nowhere (that I can find) does it actually say that they have to provide a disclosure before getting the information, just that they have to provide one when requested and protect it once they have it. Everything talks about protecting the information and your right to privacy, but nothing shows that there has a to be written out disclosure beforehand
https://www.hhs.gov/hipaa/for-individuals/guidance-materials-for-consumers/index.html
https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/index.html
https://www.hhs.gov/sites/default/files/ocr/privacy/hipaa/understanding/special/healthit/collectionusedisclosure.pdf
https://www.hhs.gov/hipaa/for-professionals/privacy/laws-regulations/index.html#:~:text=Required%20by%20Law.,regulation%2C%20or%20court%20orders).
And I could be wrong completely. Can you show me the HIPAA regulation that states that?