Notice of Security Incident - EyeMed Vision Care, LLC Learn More Solutions Performance Policyholders Our Value About Us Accessibility HIPAA Notice FIDELITY SECURITY LIFE INSURANCE COMPANY® 3130 Broadway Kansas City, Missouri 64111-2406 Phone 800-648-8624 HIPAA Notice of Privacy Practices THIS NOTICE DESCRIBES HOW PROTECTED HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY. This notice describes how we protect personal health information we have about you which relates to our medical, dental, vision and prescription drug coverage. Protected Health Information (“PHI”) is individually identifiable information about you. All of the following are examples of PHI: demographic information like your name, address and social security number; medical information that relates to your past, present or future physical or mental health that is collected, created or received from you, a health care provider, a health plan, employer or a health care clearinghouse; the providing of health care; or the past, present or future payment for providing health care to you. Our Legal Duty We are required by applicable federal and state laws to maintain the privacy of your PHI. We are also required to give You this notice about our privacy practices, our legal duties, and your rights concerning your PHI. We must follow the privacy practices that are described in this notice while it is in effect. This notice takes effect June 1, 2013 or the date coverage became effective for you, whichever is later, and will remain in effect until we replace it. We reserve the right to change our privacy practices and the terms of this notice at any time, provided such changes are permitted by applicable law. We reserve the right to make the changes in our privacy practices and the new terms of our notice effective for all PHI that we maintain, including PHI we created or received before we made the changes. Before we make a significant change in our privacy practices, we will change this notice and send the new notice to our Insureds at the time of change. You may request a copy of our notice at any time. For more information about our privacy practices, or for additional copies of this notice, please contact us using the information listed at the end of this notice. Uses and Disclosures of Your PHI In conducting our business we will create records regarding you and the insurance services we provide you. The main reasons for which we may use and may disclose your PHI are to evaluate and process any requests for medical coverage and claims for benefits you may make. The following describe these and other uses and disclosures, together with some examples: Treatment: We may use or disclose your PHI to facilitate medical treatment by providers. For example, your PHI may be provided to a physician to whom you have been referred to ensure that the physician has the necessary information to treat you. We may request the services of a business associate to assist us in these activities. Payment: We may use and disclose your PHI to facilitate payment of benefits under your insurance coverage. For example, we might disclose your PHI to determine your eligibility for benefits, to coordinate benefits, to examine medical necessity, to obtain payments and to issue explanations of benefits. We also may use your PHI to obtain payment from third parties that may be responsible for your premium payments, such as family members. Health Care Operations: We may use and disclose your PHI as necessary, and as permitted by law, to operate our business. Health care operations include: (i) rating our risk and determining our premiums for your insurance; (ii) conducting quality assessment and improvement activities; (iii) conducting or arranging for medical review, legal services, audit services, fraud and abuse detection and compliance programs; and (iv) business planning and development. On Your Authorization: You may give us written authorization to use your PHI or to disclose it to anyone for any purpose. If you give us an authorization, you may revoke it in writing at any time. Your revocation will not affect any use or disclosure permitted by your authorization while it was in effect. Unless you give us a written authorization, we cannot use or disclose your PHI for any reason except those described in this notice. We would also need to obtain your prior written authorization if your PHI were to be used for marketing or sales purposes. To Your Family and Friends: We may disclose your PHI to a family member, friend, or other person to the extent necessary to help with your health care or for payment of your health care. We may use or disclose your name, location and general condition or death to notify, or assist in the notification, of (including identifying or locating) a person involved in your care. Before we disclose your PHI to a person involved with your health care or payment for your health care, we will provide you with an opportunity to object to such uses or disclosures. If you are not present, or in the event of your incapacity or an emergency, we will disclose your PHI based on our professional judgment of whether the disclosure would be in your best interest. Your Employer or Organization Sponsoring Your Health Plan: We may disclose your PHI and the PHI of others enrolled in your group insurance plan to the employer or other organization that sponsors your group insurance plan to permit the plan administrator to perform plan administration functions. We may also disclose summary information about the enrollees in your group insurance plan to the plan administrator to use to obtain premium bids for the health insurance coverage offered through your group insurance plan or to decide whether to modify, amend or terminate your group insurance plan. The summary information we may disclose will summarize claims history, claims expenses, or types of claims experienced by the enrollees in your group insurance plan. The summary information will be stripped of demographic information about the enrollees in the group insurance plan, but the plan administrator may still be able to identify you or other participants in your group health plan from the summary information. We may also disclose enrollment and disenrollment information to either the plan administrator or plan sponsor of your group insurance plan. Underwriting: We may receive your PHI for underwriting, premium rating or other activities relating to the creation, renewal or replacement of a contract of health insurance or health benefits. We will not use or further disclose your PHI for any other purpose, except as required by law, unless the contract of health insurance or health benefits is placed with us, or where we disclose such information to MIB, Inc., a non-profit membership organization of life and health insurance companies, which operates an information exchange on behalf of its members. In those cases, our use and disclosure of your PHI will only be as described in this notice. We are also prohibited from using genetic information for underwriting. Public Benefit: We may use or disclose your PHI without your authorization when required or permitted by law for the following purposes deemed in the public interest or benefit: for public health activities, including disease and vital statistic reporting, child abuse reporting, FDA oversight, and to employers regarding work-related illness or injury; to report adult abuse, neglect, or domestic violence; to health oversight agencies; in response to court and administrative orders and other lawful processes; to law enforcement officials pursuant to subpoenas and other lawful processes, concerning crime victims, suspicious deaths, crimes on our premises, reporting crimes in emergencies, and for purposes of identifying or locating a suspect or other person; to coroners, medical examiners, and funeral directors; to organ procurement organizations; to avert a serious threat to health and safety; to the military and to federal officials for lawful intelligence, counterintelligence, and national security activities; to correctional institutions regarding inmates; and as authorized by state worker’s compensation laws. Business Associates: Certain aspects and components of our business are preformed through contracts with outside persons or organizations. Examples of these outside persons and organizations include our duly appointed insurance agents, third party administrators, financial auditors, actuarial and underwriting services, reinsurers, legal services, enrollment and billing services, claim payment and medical management services and collection agencies. At times it may be necessary for us to provide your PHI to one or more of these outside persons or organizations who assist us with our payment or health care operations. In all cases, we disclose only the minimum information necessary for these business associates to perform their responsibilities, and we require them to appropriately safeguard the privacy of your information. Individual Rights Access: In most cases, you have the right to inspect and/or obtain an electronic or hard copy of the PHI that we maintain about you. You may also send a written request designating another individual to receive your PHI on your behalf. Written requests must be signed and dated by you or your personal representative using the “Contact Information” provided at the end of this Notice. The request must clearly identify the individual to receive your PHI. We may charge a fee for the costs of copying, mailing, labor and supplies associated with your request. However, certain types of PHI will not be made available for inspection and copying. This includes psychotherapy notes and PHI collected by us in connection with, or in reasonable anticipation of any claim or legal proceeding. In very limited circumstances we may deny your request to inspect and obtain a copy of your PHI. If we do, you may request that the denial be reviewed. The review will be conducted by an individual chosen by us who was not involved in the original decision to deny your request. We will comply with the outcome of that review. Disclosure Accounting: You have the right to receive a list of instances in which we or our business associates disclosed your PHI for purposes other than for treatment, payment, health care operations or as otherwise authorized by you during the six years prior to the date the accounting is requested. For example, we would account for your PHI or demographic information we disclose during an audit by an insurance department or pursuant to a court order. You must make your request in writing using the “Contact Information” provided at the end of this Notice. If you request this accounting more than once in a 12-month period, we may charge you a reasonable, cost-based fee for responding to these additional requests. We will notify you of the cost involved and you may choose to withdraw or modify your request at that time before any costs are incurred. Restriction: You have the right to request a restriction or limitation on PHI we use or disclose about you for treatment, payment or health care operations, or that we disclose to someone who may be involved in your care or payment for your care, like a family member or friend. While we will consider your request, we are not required to agree to it. If we do agree to it, we will comply with your request. To request a restriction, you must make your request in writing using the “Contact Information” provided at the end of this Notice. In your request, you must tell us (1) what information you want to limit; (2) whether you want to limit our use, disclosure or both; and (3) to whom you want the limits to apply (for example, disclosures to your spouse or parent). We will not agree to restrictions on PHI uses or disclosures that are legally required, or which are necessary to administer our business. Unauthorized Access: You are entitled to receive notification of unauthorized access to your PHI. We maintain physical, electronic and procedural safeguards that are compliant with applicable federal and state privacy laws. However, if your PHI is ever compromised, we will notify you of the incident. Confidential Communications: You have the right to request that we communicate with you about PHI in a certain way or at a certain location if you tell us that communication in another manner may endanger you. For example, you can ask that we only contact you at work or by mail. To request confidential communications, you must make your request in writing using the “Contact Information” provided at the end of this Notice and specify how or where you wish to be contacted. We will accommodate all reasonable requests. Amendment: If you believe that your PHI is incorrect or that an important part of it is missing, you have the right to ask us to amend your PHI while it is kept by or for us. You must provide your request and your reason for the request in writing using the “Contact Information” provided at the end of this Notice. We may deny your request if it is not in writing or does not include a reason that supports the request. In addition, we may deny your request if you ask us to amend PHI that: (i) is accurate and complete; (ii) was not created by us, unless the person or entity that created the PHI is no longer available to make the amendment; (iii) is not part of the PHI kept by or for us; or (iv) is not part of the PHI which you would be permitted to inspect and copy. Right to File a Complaint: If you believe your privacy rights have been violated, you may file a complaint with us or with the Secretary of the Department of Health and Human Services. To file a complaint with us, submit your complaint using the “Contact Information” provided at the end of this Notice. All complaints must be submitted in writing. You will not be retaliated against for filing a complaint. Contact Information: If you have questions regarding this Notice or need further assistance regarding this Notice, please contact us at: Fidelity Security Life Insurance Company, HIPAA Customer Service 3130 Broadway, Kansas City, MO 64111-2406 Phone: 800-648-8624 Fax: 816-968-0660 N-00210 93-33187 Rev 0513 SOLUTIONS Supplemental Health Life & Disability Annuity Stop Loss PERFORMANCE POLICYHOLDERS OUR VALUE ABOUT US REPORT FRAUD To report the suspicion of fraud or misrepresentation by an insured, provider, agent, or FSL employee, please send an email to antifraud@fslins.com Include a description of the fraud or misrepresentation with as much detail as possible, and if desired, provide your contact information for additional questions. Copyright 2021 Fidelity Security Life Insurance | Privacy Policy | Terms of Use | HIPAA Notice | GLB Privacy Notice | California Privacy Notice | Notice at Collection | ADA Accessibility