HIPAA Notice of Privacy Practices
THIS NOTICE DESCRIBES HOW PROTECTED HEALTH INFORMATION ABOUT YOU MAY
BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION.
PLEASE REVIEW IT CAREFULLY.
This notice describes how we protect personal health information we have about you which relates to our medical, dental, vision and
prescription drug coverage. Protected Health Information (“PHI”) is individually identifiable information about you. All of the
following are examples of PHI: demographic information like your name, address and social security number; medical information
that relates to your past, present or future physical or mental health that is collected, created or received from you, a health care
provider, a health plan, employer or a health care clearinghouse; the providing of health care; or the past, present or future payment for
providing health care to you.
Our Legal Duty
We are required by applicable federal and state laws to maintain the privacy of your PHI. We are also required to give You this notice about
our privacy practices, our legal duties, and your rights concerning your PHI. We must follow the privacy practices that are described in this
notice while it is in effect. This notice takes effect June 1, 2013 or the date coverage became effective for you, whichever is later, and will
remain in effect until we replace it.
We reserve the right to change our privacy practices and the terms of this notice at any time, provided such changes are permitted by
applicable law. We reserve the right to make the changes in our privacy practices and the new terms of our notice effective for all PHI that we
maintain, including PHI we created or received before we made the changes. Before we make a significant change in our privacy practices,
we will change this notice and send the new notice to our Insureds at the time of change.
You may request a copy of our notice at any time. For more information about our privacy practices, or for additional copies of this
notice, please contact us using the information listed at the end of this notice.
Uses and Disclosures of Your PHI
In conducting our business we will create records regarding you and the insurance services we provide you. The main reasons for
which we may use and may disclose your PHI are to evaluate and process any requests for medical coverage and claims for benefits
you may make. The following describe these and other uses and disclosures, together with some examples:
Treatment: We may use or disclose your PHI to facilitate medical treatment by providers. For example, your PHI may be provided
to a physician to whom you have been referred to ensure that the physician has the necessary information to treat you. We may request
the services of a business associate to assist us in these activities.
Payment: We may use and disclose your PHI to facilitate payment of benefits under your insurance coverage. For example, we might
disclose your PHI to determine your eligibility for benefits, to coordinate benefits, to examine medical necessity, to obtain payments
and to issue explanations of benefits. We also may use your PHI to obtain payment from third parties that may be responsible for your
premium payments, such as family members.
Health Care Operations: We may use and disclose your PHI as necessary, and as permitted by law, to operate our business. Health
care operations include: (i) rating our risk and determining our premiums for your insurance; (ii) conducting quality assessment and
improvement activities; (iii) conducting or arranging for medical review, legal services, audit services, fraud and abuse detection and
compliance programs; and (iv) business planning and development.
On Your Authorization: You may give us written authorization to use your PHI or to disclose it to anyone for any purpose. If you
give us an authorization, you may revoke it in writing at any time. Your revocation will not affect any use or disclosure permitted by
your authorization while it was in effect. Unless you give us a written authorization, we cannot use or disclose your PHI for any
reason except those described in this notice. We would also need to obtain your prior written authorization if your PHI were to be used
for marketing or sales purposes.
To Your Family and Friends: We may disclose your PHI to a family member, friend, or other person to the extent necessary to help
with your health care or for payment of your health care. We may use or disclose your name, location and general condition or death
to notify, or assist in the notification, of (including identifying or locating) a person involved in your care.
Before we disclose your PHI to a person involved with your health care or payment for your health care, we will provide you with an
opportunity to object to such uses or disclosures. If you are not present, or in the event of your incapacity or an emergency, we will
disclose your PHI based on our professional judgment of whether the disclosure would be in your best interest.
Your Employer or Organization Sponsoring Your Health Plan: We may disclose your PHI and the PHI of others enrolled in your
group insurance plan to the employer or other organization that sponsors your group insurance plan to permit the plan administrator to
perform plan administration functions. We may also disclose summary information about the enrollees in your group insurance plan to
the plan administrator to use to obtain premium bids for the health insurance coverage offered through your group insurance plan or to
decide whether to modify, amend or terminate your group insurance plan. The summary information we may disclose will summarize
claims history, claims expenses, or types of claims experienced by the enrollees in your group insurance plan. The summary
information will be stripped of demographic information about the enrollees in the group insurance plan, but the plan administrator
may still be able to identify you or other participants in your group health plan from the summary information. We may also disclose
enrollment and disenrollment information to either the plan administrator or plan sponsor of your group insurance plan.
Underwriting: We may receive your PHI for underwriting, premium rating or other activities relating to the creation, renewal or
replacement of a contract of health insurance or health benefits. We will not use or further disclose your PHI for any other purpose,
except as required by law, unless the contract of health insurance or health benefits is placed with us, or where we disclose such
information to MIB, Inc., a non-profit membership organization of life and health insurance companies, which operates an information
exchange on behalf of its members. In those cases, our use and disclosure of your PHI will only be as described in this notice. We are
also prohibited from using genetic information for underwriting.
Public Benefit: We may use or disclose your PHI without your authorization when required or permitted by law for the following
purposes deemed in the public interest or benefit:
for public health activities, including disease and vital statistic reporting, child abuse reporting, FDA oversight, and to
employers regarding work-related illness or injury;
- to report adult abuse, neglect, or domestic violence;
- to health oversight agencies;
- in response to court and administrative orders and other lawful processes;
to law enforcement officials pursuant to subpoenas and other lawful processes, concerning crime victims, suspicious deaths,
crimes on our premises, reporting crimes in emergencies, and for purposes of identifying or locating a suspect or other
- to coroners, medical examiners, and funeral directors;
- to organ procurement organizations;
- to avert a serious threat to health and safety;
- to the military and to federal officials for lawful intelligence, counterintelligence, and national security activities;
- to correctional institutions regarding inmates; and
- as authorized by state worker’s compensation laws.
Business Associates: Certain aspects and components of our business are preformed through contracts with outside persons or
organizations. Examples of these outside persons and organizations include our duly appointed insurance agents, third party
administrators, financial auditors, actuarial and underwriting services, reinsurers, legal services, enrollment and billing services, claim
payment and medical management services and collection agencies. At times it may be necessary for us to provide your PHI to one or
more of these outside persons or organizations who assist us with our payment or health care operations. In all cases, we disclose only
the minimum information necessary for these business associates to perform their responsibilities, and we require them to
appropriately safeguard the privacy of your information.
Access: In most cases, you have the right to inspect and/or obtain an electronic or hard copy of the PHI that we maintain about you.
You may also send a written request designating another individual to receive your PHI on your behalf. Written requests must be
signed and dated by you or your personal representative using the “Contact Information” provided at the end of this Notice. The
request must clearly identify the individual to receive your PHI. We may charge a fee for the costs of copying, mailing, labor and
supplies associated with your request. However, certain types of PHI will not be made available for inspection and copying. This
includes psychotherapy notes and PHI collected by us in connection with, or in reasonable anticipation of any claim or legal
proceeding. In very limited circumstances we may deny your request to inspect and obtain a copy of your PHI. If we do, you may
request that the denial be reviewed. The review will be conducted by an individual chosen by us who was not involved in the original
decision to deny your request. We will comply with the outcome of that review.
Disclosure Accounting: You have the right to receive a list of instances in which we or our business associates disclosed your PHI
for purposes other than for treatment, payment, health care operations or as otherwise authorized by you during the six years prior to
the date the accounting is requested. For example, we would account for your PHI or demographic information we disclose during an
audit by an insurance department or pursuant to a court order. You must make your request in writing using the “Contact Information”
provided at the end of this Notice. If you request this accounting more than once in a 12-month period, we may charge you a
reasonable, cost-based fee for responding to these additional requests. We will notify you of the cost involved and you may choose to
withdraw or modify your request at that time before any costs are incurred.
Restriction: You have the right to request a restriction or limitation on PHI we use or disclose about you for treatment, payment or
health care operations, or that we disclose to someone who may be involved in your care or payment for your care, like a family
member or friend. While we will consider your request, we are not required to agree to it. If we do agree to it, we will comply with
your request. To request a restriction, you must make your request in writing using the “Contact Information” provided at the end of
this Notice. In your request, you must tell us (1) what information you want to limit; (2) whether you want to limit our use, disclosure
or both; and (3) to whom you want the limits to apply (for example, disclosures to your spouse or parent). We will not agree to
restrictions on PHI uses or disclosures that are legally required, or which are necessary to administer our business.
Unauthorized Access: You are entitled to receive notification of unauthorized access to your PHI. We maintain physical, electronic
and procedural safeguards that are compliant with applicable federal and state privacy laws. However, if your PHI is ever
compromised, we will notify you of the incident.
Confidential Communications: You have the right to request that we communicate with you about PHI in a certain way or at a
certain location if you tell us that communication in another manner may endanger you. For example, you can ask that we only contact
you at work or by mail. To request confidential communications, you must make your request in writing using the “Contact
Information” provided at the end of this Notice and specify how or where you wish to be contacted. We will accommodate all
Amendment: If you believe that your PHI is incorrect or that an important part of it is missing, you have the right to ask us to amend
your PHI while it is kept by or for us. You must provide your request and your reason for the request in writing using the “Contact
Information” provided at the end of this Notice. We may deny your request if it is not in writing or does not include a reason that
supports the request. In addition, we may deny your request if you ask us to amend PHI that: (i) is accurate and complete; (ii) was not
created by us, unless the person or entity that created the PHI is no longer available to make the amendment; (iii) is not part of the PHI
kept by or for us; or (iv) is not part of the PHI which you would be permitted to inspect and copy.
Right to File a Complaint: If you believe your privacy rights have been violated, you may file a complaint with us or with the
Secretary of the Department of Health and Human Services. To file a complaint with us, submit your complaint using the “Contact
Information” provided at the end of this Notice. All complaints must be submitted in writing. You will not be retaliated against for
filing a complaint.
Contact Information: If you have questions regarding this Notice or need further assistance regarding this Notice, please contact us
Fidelity Security Life Insurance Company, HIPAA Customer Service
3130 Broadway, Kansas City, MO 64111-2406