HIPAA Notice of Privacy Practices
THIS NOTICE DESCRIBES HOW PROTECTED HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
This notice describes how the Company, (herein referred to as “we”, “our” or “us”), protects personal health information we have about you which relates to our medical, dental, vision and prescription drug coverage. Protected Health Information (“PHI”) is individually identifiable information about you. All of the following are examples of PHI: demographic information like your name, address and social security number; health information that relates to your past, present or future physical or mental health that is collected, created or received from you, a health care provider, a health plan, employer or a health care clearinghouse; the providing of health care; or the past, present or future payment for providing health care to you.
Our Legal Duty
We are required by applicable federal and state laws to maintain the privacy of your PHI. We are required to give you this notice about our privacy practices, our legal duties, and your rights concerning your PHI. We must follow the privacy practices that are described in this notice while it is in effect. This notice takes effect February 1, 2022, or the date coverage became effective for you, whichever is later, and will remain in effect until we replace it.
We reserve the right to change our privacy practices and the terms of this notice at any time. The new terms of our notice will be effective for all PHI that we maintain, including PHI we created or received before we made the changes. Before we make a significant change in our privacy practices, we will change this notice and send the new notice to you at the time of change.
You may request a copy of our notice at any time. For more information about our privacy practices, or for additional copies of this notice, please contact us using the “Contact Information” provided at the end of this Notice.
Uses and Disclosures of Your PHI
In conducting our business we may create, receive and maintain PHI records regarding you and the insurance services we provide you. The main reasons for which we may use and may disclose your PHI are to evaluate and process any requests for medical coverage and claims for benefits you may make. The following describe these and other uses and disclosures, together with some examples:
For Treatment: We may use or disclose your PHI to facilitate medical treatment by providers. For example, your PHI may be provided to a physician to whom you have been referred to ensure that the physician has the necessary information to treat you. We may request the services of a business associate to assist us in these activities.
For Payment: We may use and disclose your PHI to facilitate payment of benefits under your insurance coverage. For example, we might disclose your PHI to determine your eligibility for benefits, to coordinate benefits with other insurance carriers, to examine medical necessity, to obtain payments including obtaining payment under a contract for re-insurance, and related health care data processing, and to issue explanations of benefits. We also may use your PHI to obtain payment from third parties that may be responsible for your premium payments, such as family members.
For Health Care Operations: We may use and disclose your PHI as necessary, and as permitted by law, for our health care operations. Health care operations include: (i) rating our risk and determining our premiums for your insurance; (ii) conducting quality assessment and improvement activities; (iii) conducting or arranging for medical review, legal services, audit services, fraud and abuse detection and compliance programs; and (iv) business planning and development.
On Your Authorization: You may give us written authorization to use your PHI or to disclose it to anyone for any purpose. If you give us an authorization, you may revoke it in writing at any time. Your revocation will not affect any use or disclosure permitted by your authorization while it was in effect. You should understand that we will not be able to take back any disclosures we have already made with authorization. Unless you give us a written authorization, we cannot use or disclose your PHI for any reason except those described in this notice. We also need to obtain your prior written authorization if your PHI relates to psychotherapy notes or where the PHI is to be used for marketing or sales purposes.
To Your Family and Friends: We may disclose your PHI to a family member, friend, or other person to the extent necessary to help with your health care or for payment of your health care. We may use or disclose your name, location and general condition or death to notify, or assist in the notification, of (including identifying or locating) a person involved in your care.
Before we disclose your PHI to a person involved with your health care or payment for your health care, we will provide you with an opportunity to object to such uses or disclosures. If you are not present, or in the event of your incapacity or an emergency, we will disclose your PHI based on our professional judgment of whether the disclosure would be in your best interest.
To Your Employer or Organization Sponsoring Your Health Plan: We may disclose your PHI and the PHI of others enrolled in your group insurance plan to the employer or other organization that sponsors your group insurance plan to permit the plan administrator to perform plan administration functions. We may also disclose summary information about the enrollees in your group insurance plan to the plan administrator to use to obtain premium bids for the health insurance coverage offered through your group insurance plan or to decide whether to modify, amend or terminate your group insurance plan. The summary information we may disclose may summarize claims history, claims expenses, or types of claims experienced by the enrollees in your group insurance plan. The summary information will be stripped of demographic information about the enrollees in the group insurance plan, but the plan administrator may still be able to identify you or other participants in your group health plan from the summary information. We may also disclose enrollment and disenrollment information to either the plan administrator or plan sponsor of your group insurance plan.
For Underwriting: We may receive your PHI for underwriting, premium rating or other activities relating to the creation, renewal or replacement of a contract of health insurance or health benefits. We will not use or further disclose your PHI for any other purpose, except as required by law, unless the contract of health insurance or health benefits is placed with us, or where we disclose such information to MIB, LLC., a non-profit membership organization of life and health insurance companies, which operates an information exchange on behalf of its members. In those cases, our use and disclosure of your PHI will only be as described in this notice. We are also prohibited from using or disclosing your genetic information for underwriting.
For the Public Benefit: We may use or disclose your PHI without your authorization when required or permitted by law for the following purposes deemed in the public interest or benefit:
- for public health activities, including disease and vital statistic reporting, child abuse reporting, FDA oversight, and to employers regarding work-related illness or injury;
- to report adult abuse, neglect, or domestic violence;
- to health oversight agencies;
- in response to court and administrative orders and other lawful processes;
- to law enforcement officials pursuant to subpoenas and other lawful processes, concerning crime victims, suspicious deaths, crimes on our premises, reporting crimes in emergencies, and for purposes of identifying or locating a suspect or other person;
- to coroners, medical examiners, and funeral directors;
- to organ procurement organizations;
- to avert a serious threat to health and safety;
- to the military and to federal officials for lawful intelligence, counterintelligence, and national security activities;
- to correctional institutions regarding inmates; and
- as authorized by state worker’s compensation laws.
To Avert a Serious Threat to Health or Safety: We may disclose PHI to avert a serious threat to someone’s health or safety. We may also disclose PHI to federal, state or local agencies engaged in disaster relief, as well as to private disaster relief or disaster assistance agencies to allow such entities to carry out their responsibilities in specific disaster situations.
To Business Associates: Certain aspects and components of our business are preformed through contracts with outside persons or organizations. Examples of these outside persons and organizations include our duly appointed insurance agents, third party administrators, financial auditors, actuarial and underwriting services, reinsurers, legal services, enrollment and billing services, claim payment and medical management services and collection agencies. At times it may be necessary for us to provide your PHI to one or more of these outside persons or organizations who assist us with our payment or health care operations. In all cases, we disclose only the minimum information necessary for these business associates to perform their responsibilities, and we require them to abide by specific HIPAA rules to appropriately safeguard the privacy of your information.
For Disclosures of PHI Deemed Highly Sensitive or Confidential: For certain kinds of PHI, federal and state law may require enhanced privacy protection. These may include PHI that is (1) About alcohol and drug abuse prevention, treatment and referral; (2) About HIV/AIDS testing, diagnosis or treatment; (3) About genetic testing; or (4) About psychotherapy notes. If the PHI is subject to enhanced protection, we can only disclose it with your prior written authorization unless specifically permitted or required by law.
Your Rights Regarding PHI That We Maintain About You
The following are your various rights as a consumer under HIPAA concerning your PHI. Should you have questions about or wish to exercise a specific right, please contact us in writing using the “Contact Information” provided at the end of this Notice.
Right to Inspect and Copy Your PHI: In most cases, you have the right to inspect and/or obtain an electronic or hard copy of the PHI that we maintain about you. You may also send a written request designating another individual to receive your PHI on your behalf. Written requests must be signed and dated by you or your personal representative using the “Contact Information” provided at the end of this Notice. The request must clearly identify the individual to receive your PHI. We may charge a fee for the costs of copying, mailing, labor and supplies associated with your request. However, certain types of PHI will not be made available for inspection and copying. This includes psychotherapy notes and PHI collected by us in connection with, or in reasonable anticipation of any claim or legal proceeding. In very limited circumstances we may deny your request to inspect and obtain a copy of your PHI. If we do, you may request that the denial be reviewed. The review will be conducted by an individual chosen by us who was not involved in the original decision to deny your request. We will comply with the outcome of that review.
Right to List of Disclosures: You have the right to receive a list of instances in which we or our business associates disclosed your PHI for purposes other than for treatment, payment, health care operations, purposes of national security, to law enforcement, to corrections personnel, directly to you or as otherwise authorized by you during the six years prior to the date the accounting is requested. For example, we would account for your PHI or demographic information we disclose during an audit by an insurance department or pursuant to a court order. You must make your request in writing using the “Contact Information” provided at the end of this Notice. Your request should indicate in what form you want the list (for example, paper or electronic). If you request this accounting more than once in a 12-month period, we may charge you a reasonable, cost-based fee for responding to these additional requests. We will notify you of the cost involved and you may choose to withdraw or modify your request at that time before any costs are incurred.
Right to Request Restrictions. You have the right to request a restriction or limitation on PHI we use or disclose about you for treatment, payment or health care operations, or that we disclose to someone who may be involved in your care or payment for your care, like a family member or friend. While we will consider your request, we are not required to agree to it. If we do agree to it, we will comply with your request. To request a restriction, you must make your request in writing using the “Contact Information” provided at the end of this Notice. In your request, you must tell us (1) what information you want to limit; (2) whether you want to limit our use, disclosure or both; and (3) to whom you want the limits to apply (for example, disclosures to your spouse or parent). We will not agree to restrictions on PHI uses or disclosures that are legally required, or which are necessary to administer our business.
Unauthorized Access: You are entitled to receive notification of unauthorized access to your PHI. We maintain physical, electronic and procedural safeguards that are compliant with applicable federal and state privacy laws. However, if your PHI is ever compromised, we will notify you of the incident.
Right to Request Confidential Communications: You have the right to request that we communicate with you about PHI in a certain way or at a certain location. For example, you can ask that we only contact you at work or by mail. To request confidential communications, you must make your request in writing using the “Contact Information” provided at the end of this Notice and specify how or where you wish to be contacted. We will accommodate all reasonable requests.
Right to Amend Your PHI: If you believe that your PHI is incorrect or that an important part of it is missing, you have the right to ask us to amend your PHI while it is kept by or for us. You must provide your request and your reason for the request in writing using the “Contact Information” provided at the end of this Notice. We may deny your request if it is not in writing or does not include a reason that supports the request. In addition, we may deny your request if you ask us to amend PHI that: (i) is accurate and complete; (ii) was not created by us, unless the person or entity that created the PHI is no longer available to make the amendment; (iii) is not part of the PHI kept by or for us; or (iv) is not part of the PHI which you would be permitted to inspect and copy.
Right to Notification Following a Breach of Unsecured Protected Health Information: We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information.
Right to File a Complaint: If you believe your privacy rights have been violated, you may file a complaint with us using the “Contact Information” provided at the end of this Notice. All complaints must be submitted in writing. You may file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by sending a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201, calling (877) 696-6775, or visiting www.hhs.gov/ocr/privacy/hipaa/complaints/. You will not be retaliated against for filing a complaint.
Contact Information: If you have questions regarding this Notice or need further assistance regarding this Notice, please contact us
at:
Fidelity Security Life Insurance Company, HIPAA Customer Service
Address: 3130 Broadway, Kansas City, MO 64111-2406
Telephone: 800-648-8624
Fax: 816-968-0660