HIPAA

Privacy Standards

On August 14, 2002 the Department of Health and Human Services released the final Privacy regulations. The Privacy regulations required all covered entities to comply with the regulations by April 14, 2003.

The Privacy regulations establish safeguards to protect an individual's health information by restricting the uses and disclosures of protected health information. In addition, individuals have more rights including the right to access and amend an individual’s protected health information. Whether the information is spoken, electronically transmitted, or written on paper, an individual’s health information is protected by this rule.

For the complete regulation, visit www.hhs.gov/ocr/hipaa/finalreg.html

For additional information on the Privacy Rule, visit the Office of Civil Rights.

Highlights of the Privacy Rule

Privacy Notice - All health plans and health care providers are required to provide their members with a copy of their Notice of Privacy Practices. The Notice describes the policies, safeguards, and practices for protecting the individual's confidential information as well as how to exercise an individual right and file a privacy-related complaint.

Individual Rights – Individuals have the right to access, copy and request amendments to their own information from CareFirst. Individuals may also request an accounting of to whom their information has been provided for certain purposes not related to treatment, payment or health care operations. An example would be a release of information for a subpoena or to resolve a worker's compensation claim. The forms  to invoke an individual right are available online in the Member & Visitor section.

Authorizations and Personal Representatives - A member can authorize another person to call CareFirst on their behalf to discuss protected health information by completing an  Authorization for Release of Information (29KB, 2 pgs.) or  Personal Representative (32KB, 2 pgs.) forms. General or benefit information can be provided without submitting either form. Members have the right to cancel an authorization or personal representative by contacting Member Services, writing a letter or submitting a Revocation (28KB, 2 pgs.) form.

CareFirst is committed to protecting the confidentiality of members’ health care information. Privacy-related inquiries can be sent to privacy.office@carefirst.com.

Viewing and printing this document requires Adobe Acrobat Reader, which can be downloaded free from the Adobe site.