Privacy Notice Statement Requirements i. The privacy notice statement must be written in plain language and, to the extent possible, provided in a manner that is accessible and timely to people living with disabilities and with limited English proficiency.
ii. The statement must contain at a minimum the following information:
1. A description of the information to be collected;
2. The purpose for which the information is being collected;
3. The intended use(s) of the information;
4. To whom the information may be disclosed, for what purposes, and how a record of any disclosures may be requested from the CDO;
5. What, if any, notice or opportunities for consent will be provided regarding the collection, use or disclosure of the information;
6. How the information will be secured;
7. Whether the request to collect information is voluntary or mandatory under the applicable law;
8. Effects of non-disclosure if a Consumer chooses not to provide the requested information;
9. Any rights the person may have under state or federal laws relevant to the protection of the privacy of an individual; and
10. Information on how to file complaints with CMS and the CDO related to the CDO’s and CAC’s activities in relation to the information.
iii. The CDO shall maintain its privacy notice statement content by reviewing and revising it as necessary on an annual basis, at a minimum, and before or as soon as possible after any change to its privacy policies and procedures.
Privacy Notice Statement Requirements. The privacy notice statement must be written in plain language and, to the extent possible, provided in a manner that is accessible and timely to people living with disabilities and with limited English proficiency. The statement must contain at a minimum the following information: A description of the information to be collected; The purpose for which the information is being collected; The intended use(s) of the information; To whom the information may be disclosed, for what purposes, and how a record of any disclosures may be requested from the CDO; What, if any, notice or opportunities for consent will be provided regarding the collection, use or disclosure of the information; How the information will be secured; Whether the request to collect information is voluntary or mandatory under the applicable law; Effects of non-disclosure if a Consumer chooses not to provide the requested information; Any rights the person may have under state or federal laws relevant to the protection of the privacy of an individual; and Information on how to file complaints with CMS and the CDO related to the CDO’s and CAC’s activities in relation to the information.
Privacy Notice Statement Requirements. The privacy notice statement must be written in plain language and, to the extent possible, provided in a manner that is accessible and timely to people living with disabilities and with limited English proficiency. The statement must contain at a minimum the following information: • A description of the information to be collected; • The purpose for which the information is being collected; • The intended use(s) of the information; • To whom the information may be disclosed, for what purposes, and how a record of any disclosures may be requested from CDO; • What, if any, notice or opportunities for consent will be provided regarding the collection, use, or disclosure of the information; • How the information will be secured; • Whether the request to collect information is voluntary or mandatory under the applicable law; • Effects of non-disclosure if a consumer chooses not to provide the requested information; • Any rights the consumer may have under state or federal laws relevant to the protection of the privacy of an individual; and • Information on how to file complaints with the Exchange and CDO related to the CDO’s activities in relation to the information. CDO shall maintain its privacy notice statement content by reviewing and revising it as necessary on an annual basis, at a minimum, and before or as soon as possible after any change to its privacy policies and procedures. Notwithstanding the general requirement above to provide a written privacy notice statement prior to collecting personal information or other information from consumers, this provision does not require CDO to provide a written privacy notice statement to consumers prior to collecting a consumer’s name, physical address, email address, or telephone number, so long as such information will be used solely for the purpose of making subsequent contact with the consumer to conduct an authorized function or sending to the consumer educational information that is directly relevant to authorized functions. Nonetheless, with regard to such names, physical addresses, email addresses, or telephone numbers, CDO still must comply with all privacy and security standards and requirements outlined in the Agreement and as applicable under federal and state laws and regulations, including 45 C.F.R. §155.260 and §38.2-612.1, §38.2-613, and §38.2-6514 of the Code.
Privacy Notice Statement Requirements. The Privacy Notice Statement must be prominently and conspicuously displayed on a public-facing website, if applicable, or on the electronic and/or paper form Registrant will use to gather and/or request the PII. The Privacy Notice Statement must be written in plain language and, provided in a manner that is accessible and timely to people living with disabilities and with limited English proficiency. The Privacy Notice Statement must contain, at a minimum, the following information:
a. The legal authority to collect the information;
b. The purpose for which the information is being collected;
c. The authorized use(s) and disclosure(s) of the information;
d. To whom the information may be disclosed, and for what purposes;
e. How the information will be kept secure;
f. Whether the request to collect the information is voluntary or mandatory under the applicable law;
g. The effects of non-disclosure on a Consumer if a Consumer chooses not to provide the requested information; Registrant shall maintain its Privacy Notice Statement content by reviewing and revising it, as necessary, and at a minimum, on an annual basis, as well as before or as soon as possible after any change to its privacy policies and procedures. If Registrant operates a website, it shall ensure that descriptions of its privacy and security practices, and information on how to file complaints with the Exchange and Registrant are publicly available on Registrant’s website.
