Company: HUM
Filing Date: 2025-03-07
Form Type: DEF 14A
Source: 0001193125-25-048976
Chunk: 35

Company: HUMANA INC
Filing Date: 2025-03-07
Form: DEF 14A
Chunk 35
---
. That’s why we require Humana’s independent directors, executive officers and all other associates, and contractors to complete an annual ethics andcompliance training course, which includes detailed training in enterprise risk management, cybersecurity, whistleblowers, anti-corruption, conflicts of interest and more. In addition to required annual training, our Enterprise Compliance team regularly communicates and engages with associates on ethics and compliance topics throughout the year. We also enforce a public Ethics Every Day policy as our standard of conduct, have an established Corporate Compliance Program, and adhere to a public set of Standards of Excellence. Additionally, we enforce Humana’s standards of conduct and compliance policies specifically designed for our contracted healthcare providers and third parties to deter fraud, waste and abuse. We require our contracted healthcare providers and third parties to uphold a similar commitment to ethical conduct and assure that they, their employees and downstream entities who support our Company comply with the guiding principles outlined in the compliance policy. Responsible Data Use and Data Privacy. We recognize it is our responsibility to protect member data and patient privacy, as well as use enterprise-level analytics as we continue to innovate for those we serve. Integrating digital capabilities across the organization will further accelerate our Company’s move toward differentiated experiences for our customers at the intersection of healthcare and lifestyle, tailored especially to the needs of seniors. We remain committed to operational transparency and have made our Privacy Policy and Privacy Practices publicly available on our website at www.humana.com. We further understand it is our duty to establish stable governance structures and controls as we continue to explore and integrate emerging technology within our services and product offerings. To that end, we have proudly adopted a Statement of AI Principles to guide our use of Artificial and Augmented Intelligence (AI) technology and have established interdisciplinary committees to support governance over the deployment and quality of AI models. Cybersecurity. Trust is the foundation of healthcare relationships, and we take our responsibility to protect sensitive information seriously. We adhere rigorously to the Health Insurance Portability and Accountability Act (HIPAA), a federal law designed to ensure the privacy of personal and health information. We are also committed to continuously enhancing and strengthening our technology infrastructure and security protocols to protect against security breaches. Further, we have established formal data governance, which includes accountability, oversight, processes and controls to ensure our data usage transparency and nonrepudiation, and we refresh our data privacy and security policies at least annually. We employ best-practice precautions to safeguard information and protect our members’ data by deploying defensive practices against the ever-evolving cyber threat landscape. Examples of these practices