|
|
|
|
HIPAA
Privacy Notice
|
|
|
NOTICE OF PRIVACY PRACTICES
FOR COLONIAL LIFE & ACCIDENT INSURANCE COMPANY
For expense-based Cancer, Hospital Confinement, and Intensive Care policies
Pursuant to the Health Insurance Portability and Accountability Act ("HIPAA")
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW
YOU CAN OBTAIN ACCESS TO THIS INFORMATION. PLEASE REVIEW THIS INFORMATION CAREFULLY.
We Understand the Importance of Your Privacy
This Notice describes your rights concerning "protected health information" (PHI) about you.
PHI is information that may identify you and that relates to (a) your past, present, or
future physical or mental health or condition or (b) the past, present or future payment for
your health care.
We are committed to preserving the confidentiality of PHI about our customers and in
accordance with the requirements of the law, we commit to:
- Maintain the privacy of PHI about you.
- Provide you with a notice of our legal duties and privacy practices with respect to PHI.
- Abide by the terms of our current notice of privacy practices.
We may need to change the terms of this Notice in the future. We reserve the right to make
changes and to make the new notice effective for all PHI that we maintain about you, including
PHI that we created or maintained in the past. If we make material changes to our privacy
practices, we will mail copies of the revised notices to all policyholders who were then
covered by a health plan.
Uses and Disclosures of Protected PHI for Treatment, Payment or Operations
- For Treatment – We are not a health care provider and do not engage in “treatment” of
individuals as a health care provider (a doctor, for example) would. Accordingly, although
we are permitted to use or disclose PHI about you for treatment purposes, we do not do so.
- For Payment – We may use and disclose PHI about you to obtain premiums or to determine
or fulfill our responsibility to provide you with insurance coverage or benefits under your
policy. For example, we may use or disclose PHI about you to help us determine whether you
are eligible for coverage or to review your claim for benefits under your policy.
- For Health Care Operations – We may use and disclose PHI about you to operate our
business. For example, we use PHI about you to underwrite your insurance policy.
Uses and Disclosures in Special Circumstances
Public Health Activities. We may disclose PHI about you in order to notify public health
authorities of public health risks, such as potential exposure to a communicable disease, or
to report child abuse or neglect.
Health Oversight Activities. We may disclose PHI about you to a health oversight agency
for oversight activities, including for investigations relating to possible insurance fraud.
Judicial and Administrative Proceedings. We may disclose PHI in the course of a judicial
or administrative proceeding, such as in response to a subpoena, discovery request or other
lawful process.
Law Enforcement. We may disclose PHI to law enforcement, for purposes such as reporting
a crime on our premises or in an emergency. We may also disclose to law enforcement or a
correctional facility any PHI that relates to inmates as necessary for health, safety and security.
Prevention of Serious Harm. We may use or disclose PHI about you if we believe it is
necessary to prevent or lessen serious harm (abuse, neglect, or domestic violence) to you or
to other potential victims.
Serious Threat to Health/Safety. We may use or disclose PHI when it is necessary to
prevent or lessen a serious and imminent threat to the health or safety of a person or the public.
Specialized Government Functions. We may use or disclose PHI about you for certain
government functions, including but not limited to military and veterans’ activities and
national security and intelligence activities.
Workers’ Compensation. We may disclose PHI about you to comply with Workers’
Compensation laws.
Research Organizations. We may disclose PHI to research organizations if the organization
has met certain conditions about protecting the privacy of PHI.
Plan Sponsors. We may disclose PHI to the plan sponsor of a group health plan for plan
administrative functions if the plan documents contain provisions concerning restrictions on how
the plan sponsor may use or further disclose PHI.
Related Benefits and Services. We may contact you to inform you of benefits or services
related to your policy that may be of interest to you.
Decedents. We may disclose PHI to a coroner, medical examiner, or funeral director to
permit them to carry out their legal duties.
Donation/Transplantation. We may use or disclose PHI for the purpose of facilitating organ,
eye or tissue donation and transplantation.
Business Associates. We may disclose PHI to our business associates, such as our third-party
administrators, accountants, or attorneys if those business associates have signed a written agreement
concerning appropriate uses and disclosures of PHI.
Involvement in Individual's Care. We may disclose PHI about you to a family member, close
personal friend or other person you identify if specifically needed or that person's involvement with
your care or payment related to your health care.
Notification of Location/Condition. We may use or disclose PHI to give notice or assist in
giving notice of your location, general condition or death to a family member, personal representative
or another person responsible for your care.
Disclosures Required by Law. We will use and disclose PHI about you when we are required to do
so by federal, state, or local law.
If applicable law, other than HIPAA, prohibits or materially limits our uses and disclosures of PHI, as
described above, we will restrict our uses or disclosure of PHI in accordance with the stricter standard.
Uses and Disclosures of PHI Made Only With Your Written Authorization
- Other uses and disclosure of PHI about you will be made only with your written authorization,
unless otherwise permitted or required by law as described in this notice.
- You may revoke your written authorization any time, in writing, except to the extent we have
taken action in reliance on that written authorization before you have revoked it.
- You may not revoke your authorization to the extent that other law provides us with the right
to contest a claim under the policy or the policy itself, if the authorization was obtained as a
condition of obtaining this insurance coverage.
Your Rights
Right to a Copy of this Notice. If you would like to have a paper copy of this Notice, send a
written request to the Privacy Officer as indicated in this document
Inspection and Copying. You have the right to access your information. Certain requests for
access to your PHI must be in writing, must state that you want access to your PHI, and must be signed
by you or your representative (such as requests for medical records provided to us directly from your
health care provider).
You have the right, upon written notice, to inspect and copy certain PHI that may be used to make decisions
about your insurance coverage, including medical records and billing records, but not including
psychotherapy notes. We may deny your request to inspect and/or copy in certain limited circumstances;
however, you may request a review of our denial.
Amendment. You may ask us to amend PHI about you (as long as the information is kept by or for us)
and must include a reason for the request. If your request and reason supporting the request are not
submitted in writing, we may deny the request.
Alternative Contact Information. You have the right to receive communications of PHI about you
from us in a certain manner or at a certain location, as long as the request is reasonable under the
circumstances. For example, you may prefer to have mail from us sent to your work address rather than
to your home. Submit requests for an alternative method of contact in writing to the Privacy Officer.
Requesting Restrictions. You have the right to request restrictions on our use or disclosure of
PHI about you. We are not required to agree to your request. However, if we do agree, we are bound
by our agreement except when otherwise required by law, in emergencies, or when the information is
necessary for your treatment. Your request must clearly and concisely describe;
(a) the information you wish restricted;
(b) whether you are requesting to limit our use, disclosure or both; and
(c) to whom you want the limits to apply.
Accounting. You have the right to request an “accounting of disclosures.” An “accounting of
disclosures” is a list of certain disclosures we have made of PHI about you other than disclosures
you authorized and other than disclosures made for treatment, payment or operations. The request must
be in writing. The first request for an accounting that you make within a 12-month period is free;
however, we may charge you for additional requests within the same 12-month period. We will notify you
of the costs of the additional requests, and you may withdraw your request before you incur any costs.
Complaints. If you believe your privacy rights have been violated, you may file a complaint
with us or with the Secretary of Health and Human Services. All complaints must be submitted in
writing. We will not penalize you for filing such a complaint.
To exercise any of your rights as set forth in this Notice, please write to:
Privacy Officer
Colonial Life & Accident Insurance Company
2211 Congress Street, M385
Portland, ME 04122
For further information about matters covered by this notice, please contact the Privacy Office
at the above address or call 1-800-325-4368. You may also refer to the "Frequently Asked
Questions" document regarding this notice that is included with this document on our web
site.
|
|
|