Tuesday, Jul. 22, 2014
74 ° Fair
This notice describes how medical information about you may be used and disclosed and how you can access this information. Please review it carefully and share it with family members as appropriate. This notice is provided to all Virginia Wesleyan College benefit-eligible and Plan applicants and policyholders. If you have any questions, please call Human Resources at 757.455.3316.
Effective Date: April 14, 2004
Title II of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) is a federal law. We are required by HIPAA to provide you with this notice. This notice describes our privacy practices, legal duties, and your rights concerning your Protected Health Information. We must follow the privacy practices described in this notice while it is in effect. This notice takes effect on April 14, 2004. It will remain in effect unless and until we publish and issue a new notice.
HIPAA imposes numerous requirements on employer health plans concerning the use and disclosure of individual health information. This information, known as Protected Health Information (PHI) includes virtually all individually identifiable health information held by a health plan – whether received in writing, in an electronic medium, or as an oral communication. This notice describes the privacy practices of the group health plans sponsored by Virginia Wesleyan College. These plans include Anthem Health, Healthkeepers by Priority, Inc., Anthem Prescription Drug benefits, MetLife Dental, Anthem Employee Assistance Plan, and Ceridian Flexible Spending. The group health plans covered by this notice may share information with each other to carry out Treatment, Payment, and/or Health Care Operations. These plans are collectively referred to as the "Plan" in this notice, unless specified otherwise.
The Plans duties with respect to health information about you
The Plan is required by law to maintain the privacy of your health information and to provide you with this notice of the Plan's legal duties and privacy practices with respect to your health information. Since you participate in one of the Virginia Wesleyan College health plans and the Virginia Wesleyan College dental plan, you should have already received a notice directly from Anthem or Healthkeepers, and MetLife. It is important to note that these rules apply to the Plan, not Virginia Wesleyan College as an employer – that is the way the HIPAA rules work. Different policies may apply to other VWC programs or to data unrelated to the health plan.
How the Plan may use or disclose your health information
The amount of health information used or disclosed will be limited to the "Minimum Necessary" for these purposes, as defined under the HIPAA rules and the Virginia Wesleyan College Minimum Necessary policy. The Plan may also contact you to provide appointment reminders or information about treatment alternatives or other health-related benefits and services that may be of interest to you.
How the Plan may share your health information with Virginia Wesleyan College
The Plan, or its health insurers and/or business associates, may disclose to VWC the following health information without your written authorization:
In addition, the Plan, and/or business associates, may disclose your health information without your written authorization to VWC for plan administration purposes if VWC adopts Plan amendments describing its administration activities.
VWC cannot and will not use health information obtained from the Plan for any employment-related actions. However, health information collected by VWC from other sources, for example under the Family and Medical Leave Act, Americans with Disabilities Act, or workers' compensation is not protected under HIPAA (although this type of information my be protected under other federal or state laws).
In certain cases, your health information can be disclosed without authorization to a family member, close friend, or other person you identify who is involved in your care or payment for your care. Information describing your location, general condition, or death may be provided to a similar person (or to a public or private entity authorized to assist in disaster relief efforts). You will generally be given the chance to agree or object to these disclosures (although exceptions may be made, for example if you are not present or if you are incapacitated). In addition, your health information may be disclosed without authorization to your legal representative.
The Plan is also allowed to use or disclose your health information without your written authorization for uses and disclosures required by law, for public health activities, and other specified situations, including:
Except as described in this notice, other uses and disclosures will be made only with your written authorization. You may revoke your authorization as allowed under the HIPAA rules. However, you cannot revoke your authorization if the Plan has taken action relying on it. In other words, you cannot revoke your authorization with respect to disclosures the Plan has already made.
You have the following rights with respect to your health information the Plan maintains. These rights are subject to certain limitations, as discussed below. This section of the notice describes how you may exercise each individual right. See the "Contact" section of this notice for information on how to submit requests.
Right to request restrictions on certain uses and disclosures of your health information and the Plan's right to refuse
You have the right to ask the Plan to restrict the use and disclosure of your health information for Treatment, Payment, or Health Care Operations, except for uses or disclosures required by law. You have the right to ask the Plan to restrict the use and disclosure of your health information to family members, close friends, or other persons you identify as being involved in your care or payment for your care. You also have the right to ask the Plan to restrict use and disclosure of health information to notify those persons of your location, general condition, or death – or to coordinate those efforts with entities assisting in disaster relief efforts. If you want to exercise this right, your request to the Plan must be in writing.
The Plan is not required to agree to a requested restriction. If the Plan does agree, a restriction may later be terminated by your written request, by agreement between you and the Plan (including an oral agreement), or unilaterally by the Plan for health information created or received after you are notified that the Plan has removed the restrictions. The Plan may also disclose health information about you if you need emergency treatment, even if the Plan has agreed to a restriction.
If you think that disclosure of your health information by the usual means could endanger you in some way, the Plan will accommodate reasonable requests to receive communications of health information from the Plan by alternative means or at alternative locations.
If you want to exercise this right, your request to the Plan must be in writing and you must include a statement that disclosure of all or part of the information could endanger you. This right may be conditioned on you providing an alternative address or other method of contact and, when appropriate, on you providing information on how payment, if any, will be handled.
With certain exceptions, you have the right to inspect or obtain a copy of your health information in a "Designated Record Set." This may include medical and billing records maintained for a health care provider; enrollment, payment, claims adjudication, and case or medical management record systems maintained by a plan; or a group of records the Plan uses to make decisions about individuals. However, you do not have a right to inspect or obtain copies of psychotherapy notes or information compiled for civil, criminal, or administrative proceedings. In addition, the Plan may deny your right to access, although in certain circumstances you may request a review of the denial. If you want to exercise this right, your request to the Plan must be in writing. Within 60 days of the receipt of your request to the Plan, the Plan will provide you with:
The Plan may provide you with a summary or explanation of the information instead of access to or copies of your health information, if you agree in advance and pay any applicable fees.
If the Plan doesn't maintain the health information but knows where it is maintained, you will be informed of where to direct your request.
With certain exceptions, you have a right to request that the Plan amend your health information in a Designated Record Set. The Plan may deny your request for a number of reasons. For example, your request may be denied if the health information is accurate and complete, was not created by the Plan (unless the person or entity that created the information is no longer available), is not part of the Designated Record Set, or is not available for inspection (e.g., psychotherapy notes or information compiled for civil, criminal, or administrative proceedings). If you want to exercise this right, your request to the Plan must be in writing, and you must include a statement to support the requested amendment. Within 60 days of receipt of your request, the Plan will:
You have the right to a list of certain disclosures the Plan has made of your health information. This is often referred to as an "accounting of disclosures." You generally may receive an accounting of disclosures if the disclosure is required by law, in connection with public health activities, or in similar situations listed in the "other allowable uses or disclosures of your health information" section of this notice, unless otherwise indicated below. You may be entitled to an accounting of disclosures that the Plan should not have made without authorization.
You may receive information on disclosures of your health information going back for six (6) years from the date of your request, but no earlier than April 14, 2003 (the general date that the HIPAA privacy rules are effective). You do not have a right to receive an accounting of any disclosures made:
In addition, your right to an accounting of disclosures to health oversight agency or law enforcement official may be suspended at the request of the agency or official.
If you want to exercise this right, your request to the Plan must be in writing. Please see the Virginia Wesleyan College policy and procedure on HIPAA Accounting for further details.
The Plan must abide by the terms of the Privacy Notice currently in effect. This notice takes effect on April 14, 2004 for all the VWC Group Health Plans, The Anthem Prescription Drug Plan, the MetLife Dental Plan, Ceridian Flexible Spending Plan, and the Anthem Employee Assistance Plan that may be subject to HIPAA. However, the Plan reserves the right to change the terms of its privacy policies as described in this notice at any time, and to make new provisions effective for all health information that the Plan maintains. This includes health information that was previously created or received, not just health information created or received after the policy is changed. If changes are made to the Plan's privacy policies described in this notice, you will be provided with a revised Privacy Notice directly from your insurer and/or from Virginia Wesleyan College which will be sent to you in the manner as this notice was provided. New VWC employees may also receive an updated version from the VWC Human Resources office.
In addition, VWC will promptly revise and distribute its Notice whenever there is a material change to:
Except when required by law, a material change to any term of this Notice may not be implemented prior to the effective date of the revised Notice that implements the material change.
If you believe your privacy rights have been violated, you may complain to the Plan and to the Secretary of Health and Human Services. You won't be retaliated against for filing a complaint. To file a complaint, please contact the applicable insurance carrier.
For more information on the Plan's privacy policies or your rights under HIPAA, contact Karla Rasmussen, Director of Human Resources, Virginia Wesleyan College, 1584 Wesleyan Drive, Norfolk, VA 23502, 757.455.3316.