Uses and Disclosures of Medical Information: Your health plan information may be used and disclosed for treatment, payment, and health care operations. Examples include: TREATMENT: disclosure to a health care provider to provide treatment; PAYMENT: use or disclosure to pay claims or coordinate benefits; HEALTH CARE OPERATIONS: determining premiums, quality assessment and improvement activities, care coordination or case management, accreditation, legal services, fraud prevention/investigation, wellness and disease management, and other administrative purposes.
Examples are illustrative, not exhaustive.
Authorizations: You may provide written authorization to use or disclose Your medical information for any purpose. You may revoke an authorization in writing at any time; revocation will not affect disclosures made while the authorization was in effect. Certain uses (e.g., most psychotherapy notes) require a valid authorization before disclosure.
Marketing and sale of PHI require explicit authorization; genetic information cannot be used for underwriting under GINA.
Personal Representative and Plan Sponsors: Health plan information may be disclosed to a personal representative (family member, friend, or other person) as necessary to help with Your health care or payment, if You agree. For group plans, plan sponsors may receive health plan information to perform plan administration functions; see plan documents for details of permitted uses by the sponsor.
Underwriting: health plan information may be used for underwriting, premium rating, or related activities; if a contract is not issued, the information will not be further disclosed except as required by law.
Required By Law and Law Enforcement: Health plan information may be disclosed as required by state or federal law, in response to court or administrative orders, subpoenas, discovery requests, or other lawful process. It may be disclosed to assist law enforcement, or to avert a serious threat to health or safety, and in cases involving victims of abuse or neglect to the extent necessary.
Includes limited disclosures to military authorities and authorized federal officials for national security activities.
Research, Marketing, and Fundraising: Your health plan information may be used or disclosed for research as allowed by law. We may use information to provide information about health-related benefits or services; business associates may assist. We will not market non-health products or services without Your affirmative opt-in. You have the right to opt out of fundraising communications.
Disclosures that constitute a sale of PHI are prohibited without Your authorization.
Individual Rights: You have rights regarding Your health plan information, including: access to or copies of Your information (written request required; fees may apply); an accounting of disclosures (for disclosures outside treatment, payment, operations in the past 6 years; fees may apply for repeated requests); request restrictions on uses/disclosures (we are not required to agree, only enforceable if in a signed written agreement); the right to notice following a breach of unsecured PHI (including date, type of data, who accessed and corrective actions); confidential communications by alternative means or at alternative locations when disclosure would endanger You; and the right to request amendments to Your information (may be denied with written explanation and opportunity to submit a statement of disagreement).
Breach Notice: You will be notified following a breach of unsecured protected health information. Notice will include at minimum the date of the breach, the type of data disclosed, who made the non-permitted access or disclosure and who received it, and corrective actions taken or planned.
Additional state or federal requirements may apply.
Privacy Complaints and Contact Information: For more information or to file a privacy complaint, contact the Privacy Office. There will be no retaliation for filing a complaint with BlueCross BlueShield of Tennessee or with the U.S. Department of Health and Human Services. Contact details: BlueCross BlueShield of Tennessee, Inc., The Privacy Office, 1 Cameron Hill Circle, Chattanooga, TN 37402; Phone: (888) 455-3824; Fax: (423) 535-1976; Email: privacy_office@bcbst.com.
You may also be provided the address to file a complaint with HHS upon request.