Common use of GLBA Clause in Contracts

GLBA. HQY and HSAs are subject to the privacy and security protections of the Xxxxx-Xxxxx-Xxxxxx Act and applicable state laws (collectively, “GLBA”) and HQY is required by GLBA to safeguard each Account Holder’s nonpublic personal information (“NPI”), which includes information HQY collects or generates in the course of offering custodial services to an Account Holder, including Account Holder information collected by Employer and transmitted to HQY pursuant to the Agreement. HQY may disclose NPI to Employer only when permitted under GLBA. For the avoidance of doubt, Personal Information provided by or through an employer, health plan or health insurer to HQY (in its capacity as an HSA custodian) for HSA- related purposes is not provided as a plan service under the BAA (as defined below). Rather such Personal Information constitutes account information subject to GLBA and is not considered HIPAA protected health information (“PHI”).

GLBA. HQY and HSAs are subject to the privacy and security protections of the Xxxxx-Xxxxx-Xxxxxx Act and applicable state laws (collectively, “GLBA”) and HQY is required by GLBA to safeguard each Account Holder’s nonpublic personal information (“NPI”), which includes information HQY collects or generates in the course of offering custodial services to an Account Holder, including Account Holder information collected by Employer and transmitted to HQY pursuant to the Agreement. HQY may disclose NPI to Employer only when permitted under GLBA. For the avoidance of doubt, Personal Information provided by or through an employer, health plan or health insurer to HQY (in its capacity as an HSA custodian) for HSA- HSA-related purposes is not provided as a plan service under the BAA (as defined below). Rather such Personal Information constitutes account information subject to GLBA and is not considered HIPAA protected health information (“PHI”).