The Health Insurance Portability and Accountability Act, or HIPAA, provides privacy procedures for personal health information.

Following these procedures, the Health Care Authority — including Medicaid, Basic Health, Washington Health and Public Employees Benefits Board (PEBB) Programs and the Uniform Medical Plan (UMP) — must protect health information collected about its members, applicants, and state employees and retirees, even after death. This includes written, spoken, and electronic information.

If you are a retiree receiving benefits from the Department of Retirement Systems (DRS), the PEBB Program may share your information with DRS to better serve you.

A Notice of Privacy Practices at the Health Care Authority is available on this site.

The Uniform Medical Plan also provides a Notice of Privacy Practices to its members. This notice is also available on UMP's website.

If you want the Health Care Authority (HCA) to release your information to someone (a relative, legislator, friend, etc.) you will need to sign an authorization form.

You can find more information on HIPAA at the U.S. Department of Health and Human Services' Office for Civil Rights website.

Web Data Privacy Notice

Personal/protected information will not be used or disclosed to any person or entity who has no need to know it. Learn more.

Credit Card Refunds

HCA will issue a refund if a refund is due. Please call 1-800-660-9840 for more information.