Logo_hca
Health Care Authority Privacy Policy

HIPAA

The Health Insurance Portability and Accountability Act, or HIPAA, provides privacy procedures for both personal health information and personally identifiable information.

Following these procedures, the Health Care Authority-including the Basic Health and Public Employees Benefits Board (PEBB) programs and the Uniform Medical Plan (UMP)-must protect personal and health information collected about its members, applicants, and state employees and retirees, even after death. This includes written, spoken, and electronic information.

If you are a retiree of the Department of Retirement Systems (DRS), the PEBB Program may share your information with DRS to better serve you.

As a health plan, UMP members received a mailing with more details about how HIPAA affects them, along with UMP's Privacy Practices.

If you want the Health Care Authority to release your information to someone (a relative, legislator, friend, etc.) you will need to sign an authorization form.

You can find more information on HIPAA at the U.S. Department of Health and Human Services' Office for Civil Rights website.

Web Data Privacy Notice

Personal/protected information will not be used or disclosed to any person or entity who has no need to know it.

Uniform Medical Plan Notice of Privacy Practices

How medical information about you may be used and disclosed and how you can get access to that information. Learn more.