THE COMPANY'S DUTIES. The Company is required by law to maintain the privacy of PHI and to provide individuals (participants and beneficiaries) with notice of its legal duties and privacy practices and to notify affected individuals of a breach of unsecured PHI. The Company is required to abide by the terms of this notice. The Company reserves the right to change its privacy practices and to apply the changes to any PHI received or maintained by the Company prior to that date. If a privacy practice is changed, a revised version of this notice will be provided to all past and present participants and beneficiaries for whom the Company still maintains PHI. This notice and any revised version of this notice will be posted on the Company's internal website or mailed. Any revised version of this notice will be distributed within 60 days of the effective date of any material change to the uses or disclosures, the individual's rights, the duties of the Company or other privacy practices stated in this notice. A. Minimum Necessary" Standard When using or disclosing PHI, or when requesting PHI from another covered entity, the Company will make reasonable efforts not to use, disclose or request more than the minimum amount of PHI necessary to accomplish the intended purpose of the use, disclosure or request, taking into consideration practical and technological limitations. However, the minimum necessary standard will not apply in the following situations: • Disclosures to or requests by a health care provider for treatment; • Uses or disclosures made to the individual; • Disclosures made to the Secretary of HHS; • Uses or disclosures that are required by law; and • Uses or disclosures that are required for the Company's compliance with legal regulations. This notice does not apply to information that has been "de-identified." De-identified information is information that does not identify an individual and with respect to which there is no reasonable basis to believe that the information can be used to identify an individual is not individually identifiable health information. In addition, the Company may use or disclose "summary health information" to a plan sponsor for obtaining premium bids or modifying, amending or terminating the Company, which summarizes the claims history, claims expenses or type of claims experienced by individuals for whom the Company Sponsor has provided health benefits under the Company; and from which identifying information has been deleted in accordance with HIPAA.
Appears in 5 contracts
Samples: Special Risk Insurance Certificate, Business Travel Accident Insurance Policy, Special Risk Insurance Certificate