The Health Insurance Portability & Accountability Act of 1996 (“HIPAA”) is a federal program that requires all medical records and other individually identifiable health information used or disclosed by HealthEZ in any form, whether electronically, on paper, or orally, are kept properly confidential. This Act gives the patient the right to understand and control how health information is used. HIPAA provides penalties for covered entities that misuse personal health information.

As required by HIPAA, we have prepared this explanation of how we are required to maintain the privacy of a patient’s health information and how we may use and disclose this health information.

  • Treatment means providing, coordinating, or managing health care and related services by one or more health care providers.
  • Payment means such activities as obtaining funds for payment of services received, confirming coverage, billing or collection activities, and utilization review.
  • Health care operations include the business aspects of managing the healthcare plan, such as adjudicating claims, auditing functions, cost-management analysis, and customer service. De-identified health information may also be created and distributed by HealthEZ.

As part of these allowed uses of health care information, we may request additional information about the patient from authorized business partners. Any other uses or disclosures of a member’s health information will be made only with their written authorization.

This authorization may be revoked in writing and we are required to honor and abide by that written request, except to the extent that we have already taken actions relying on the authorization.

A patient has the following rights with respect to their protected health information, which can be exercised by presenting a written request to the Privacy Officer directly at HealthEZ.

  • The right to request restrictions on certain uses and disclosures of protected health information, including those related to disclosures to family members, or any other person identified by the member. HealthEZ is not, however, required to agree to a requested restriction. If the restriction is agreed to, it must be abided by unless the member/patient agrees in writing to remove it.
  • The right to reasonable requests to receive confidential communications of protected health information from us by alternative means or at alternative locations.
  • The right to inspect and copy the patient’s protected health information.
  • The right to amend the patient’s protected health information.
  • The right to receive an accounting of disclosures of protected health information.
  • The right to obtain a paper copy of this notice from HealthEZ upon request.

HealthEZ is required by law to maintain the privacy of the patient’s protected health information and to provide the patient with notice of their legal duties and privacy practices with respect to their protected health information. The use of a patient’s health information by HealthEZ will be for billing, payment and utilization review activities as outlined above.

This notice is effective as of April 14, 2003 and we are required to abide by the terms of the Notice of Privacy Practices currently in effect. We reserve the right to change the terms of our Notice of Privacy Practices and to make new notice provisions effective for all protected health information that we maintain. We will post this notice and you may request a written copy of a revised Notice of Privacy Practices from this office.

You have recourse if you feel that your privacy protections have been violated. You have the right to file a formal, written complaint with us at the address below, or with the Department of Health & Human Services, Office of Civil Rights, about violations of the provisions of this notice or the policies and procedures of our office. We will not retaliate against you for filing a complaint.

Please contact us for more information:
Compliance Officer, HealthEZ, 7201 West 78th Street, Bloomington, MN 55439
(952) 896-4872

For more information about HIPAA or to file a complaint:
U.S. Dept. of Health & Human Services, Office of Civil Rights, 200 Independence Avenue, S.W., Washington, D.C. 20201
(202) 619-0257 or 1-877-696-6775