THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
PRIVACY OF PERSONAL HEALTH INFORMATION. We are required to protect the privacy of your confidential personal health information, referred to below as protected health information (“PHI”). This Notice of Privacy Practices (“Notice”) is provided to you as required by the privacy regulations issued under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”). This Notice describes how we may use and disclose your PHI to carry out payment and healthcare operations and for other purposes that are permitted or required by law. This Notice also describes your rights to access and control your PHI.
USES AND DISCLOSURES FOR PAYMENT AND HEALTH CARE OPERATIONS. While, as we explain later in this Notice, we generally will not disclose your PHI without your written authorization, we may use or disclose your PHI for the purposes of payment and healthcare operations, described in more detail below, without obtaining written authorization from you.
Payment. We may use and disclose PHI in order to obtain premiums or to determine or fulfill our responsibility for coverage and benefits. Our activities may include, but are not limited to, uses and disclosures for the following purposes:
Healthcare Operations. We may use and disclose PHI as follows for the purposes of our health care operations:
OTHER USES AND DISCLOSURES FOR WHICH AUTHORIZATION IS NOT REQUIRED. In addition to using or disclosing PHI for payment and healthcare operations, we may use and disclose PHI without your written authorization under the circumstances described below.
As Required by Law and Law Enforcement. We will disclose PHI when required or permitted to do so by applicable law. For example, we will disclose PHI to respond to a court or administrative order, a subpoena, a summons or other form of legal process. We will also comply with a law enforcement request for PHI to the extent that we are legally required or permitted to comply with such a request. For example, we will disclose PHI as necessary to prevent, detect, or aid in the prosecution of insurance fraud.
For Public Health Activities and Public Health Risks. We will disclose PHI to government officials responsible for the administration of public health activities and public health risks as we are expressly required or permitted by law to disclose. For example, when the law requires us to assist in the prevention and control of disease, including communicable disease, we will disclose PHI to the appropriate official.
For Health Oversight Activities. We may disclose PHI to the government, including State Insurance Departments, for oversight activities authorized by law, such as audits, complaint resolution, investigations, inspections, licensure or disciplinary actions, and other proceedings, actions or activities necessary for monitoring the healthcare system, government programs and compliance with civil rights laws.
To Avoid a Serious Threat to Health or Safety. Under certain circumstances, we may use and disclose PHI to law enforcement personnel or other appropriate persons to prevent or lessen a serious threat to the health or safety of a person or to assist in disaster relief efforts.
Specialized Government Functions. We may use and disclose PHI of military personnel and veterans under certain circumstances. We may also disclose PHI to authorized federal officials for intelligence, counterintelligence, and other national security activities, and for the provision of protective services to the President or other authorized persons or foreign heads of state or to conduct special investigations. If you are an inmate of a correctional institution or under the custody of a law enforcement official, we may disclose PHI to the correctional institution or official in certain circumstances.
Workers’ Compensation. We may disclose PHI to comply with workers’ compensation or other similar laws. These programs provide benefits for work-related injuries or illnesses.
Health-Related Benefits and Service. We may use and disclose PHI for the purpose of contacting you to provide information to you regarding our health-related benefits and services that may be of interest to you.
Disclosures to You or for HIPAA Compliance Investigations. . We may (and in some circumstances must) disclose PHI to you. We must disclose PHI to the Secretary of the United States Department of Health and Human Services when requested by the Secretary in order to investigate our compliance with HIPAA.
USES AND DISCLOSURES OF PHI TO PERSONS INVOLVED IN YOUR CARE OR PAYMENT FOR HEALTH CARE. With your oral agreement, we may disclose PHI to a family member or other person you identify as being involved with your health care or payment for health care. For example, if you orally agree we may disclose to your spouse the status of your claim for benefits. If you are incapacitated or other emergency circumstances prevent you from having the opportunity to agree to such a disclosure, the law permits us to make the disclosure if, in the exercise of our professional judgment, we determine that disclosure is in your best interest.
If we make a disclosure to a person involved in your care or payment for health care, we will limit our disclosure to the minimum necessary and directly relevant PHI.
USES AND DISCLOSURES OF PHI FOR WHICH AUTHORIZATION IS REQUIRED. HIPAA’s privacy rules require your written authorization for the use or disclosure of:
GENETIC INFORMATION. HIPAA regulations prohibit our health plans, except for long-term care policies, from using or disclosing your genetic information for underwriting purposes.
REGULATORY REQUIREMENTS.We are required by law to maintain the privacy of PHI, to provide individuals with notice of our legal duties and privacy practices with respect to PHI, to notify affected individuals following a breach of unsecured PHI, and to abide by the terms described in the Notice currently in effect. We reserve the right to change the terms of this Notice and of its privacy policies, and to make the new terms applicable to all of the PHI we maintain. If you are insured by us at the time we make a material revision to this Notice, we will provide you with a revised Notice within 60 days of the revision, and we will post the revised Notice on our website, www.protective.com.
INDIVIDUAL RIGHTS. You have the following rights regarding your PHI:
CONTACT INFORMATION. If you have any questions about this Notice, please write to:MONY HIPAA Privacy
Effective Date: January 31, 2014