(Lubrizol group health plans/HIPAA)
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Federal regulations under the Health Insurance Portability and Accountability Act (HIPAA) require that the plan provide you with this Notice Regarding Privacy of Protected Health Information. This notice describes (1) how the plan may use and disclose your protected health information, (2) your rights to access and control your protected health information and (3) the plan’s duties and contact information.
Protected Health Information
“Protected health information” is health information created or received by the plan that contains information that may be used to identify you, such as your name or address. It includes written or verbal health information that relates to your past, present or future physical or mental health; the provision of health care to you; and your past, present or future payment for health care.
The Use and Disclosure of Protected Health Information in Payment and Health Care Operations
Your protected health information may be used and disclosed by the plan in the course of providing payment for treatment and conducting medical, prescription, vision and dental claims operations. Any disclosures may be made in writing, electronically, by facsimile, or orally. The plan may also use or disclose your protected health information in other circumstances if you authorize the use or disclosure, or if state law or the HIPAA privacy regulations authorize the use or disclosure.
Treatment. The plan may use or disclose your protected health information in connection with your treatment, which includes the provision, coordination or management of health care and related services. For example, the plan may disclose information to a treating specialist the name of your regular doctor so that the specialist may request the transfer of your test results from your doctor.
Payment. The plan may use or disclose your protected health information to provide payment to you or your health care providers for services rendered to you by your health care providers. These uses or disclosures may include disclosures to your health care provider or to another group health care plan or insurer to obtain the information needed to process your claim for benefits.
Operations. The plan may use or disclose your protected health information when needed for the plan’s medical, prescription, and dental claims operations for the purposes of management and administration of the plan. For example, the plan may use your information for claims operations including: utilization management; disease management program activities; administration of the plan’s subrogation provisions; coordination of benefits; claims management; reviewing provider performance and plan performance; activities relating to the creation, renewal or replacement of a contract of health insurance or health benefits; conducting or arranging for medical review, legal services, actuarial services and auditing functions, including fraud and abuse detection and compliance programs; business planning and development; systems maintenance; and management activities.
Other Uses and Disclosures. The plan may also use or disclose your protected health information to provide appointment reminders; to describe or recommend treatment alternatives or to provide information about other health-related benefits and services that may be of interest to you.
The plan may use or disclose protected health information for underwriting purposes as permitted by law, but the plan cannot use or disclose your genetic information for that purpose. Underwriting purposes include eligibility rules or determinations, including eligibility for enrollment or continued enrollment and for benefits under the plan; calculating premium or contribution amounts under the plan; applying pre-existing condition exclusions, if any; or activities related to creating, renewing or replacing any health insurance contract or health benefits. The plan may also disclose protected health information to The Lubrizol Corporation, the sponsor of the plan. Any disclosure to The Lubrizol Corporation will be in accordance with the HIPAA privacy regulations.
Additional Uses and Disclosures Permitted without Authorization or an Opportunity to Object
In addition to payment and health care operations, the plan may use or disclose your protected health information without your permission or authorization in certain circumstances, including:
When Legally Required. The plan will comply with any federal, state or local law that requires it to disclose your protected health information.
For Judicial and Administrative Proceedings. The plan may disclose your protected health information for any judicial or administrative proceeding if the disclosure is expressly authorized by an order of a court or administrative tribunal as expressly authorized by the order or a signed authorization is provided.
For Workers’ Compensation. The plan may disclose your protected health information to comply with workers’ compensation laws or similar Programs.
Uses and Disclosures Permitted with an Opportunity to Object
Subject to your objection, the plan may disclose your protected health information to a family member or close personal friend if the disclosure is directly relevant to the person’s involvement in your care or payment related to your care. The plan will inform you orally or in writing of these uses and disclosures of your protected health information as well as provide you with an opportunity to object in advance. Your agreement or objection to the uses and disclosures can be oral or in writing. If you do not respond to these disclosures, the plan is able to infer from the circumstances that you do not object, or the plan determines that it is in your best interests for the plan to disclose information that is directly relevant to the person’s involvement with your care, then the plan may disclose your protected health information. If you are incapacitated or in an emergency situation, the plan may determine if the disclosure is in your best interests and, if that determination is made, may only disclose information directly relevant to your health care.
Uses and Disclosures Authorized by You
Other than the circumstances described above, the plan will not disclose your health information unless you provide written authorization. In particular the plan will not, without your authorization, use or disclose your health information that consists of psychotherapy notes, except to defend itself in a legal action or other proceeding brought by you or as otherwise permitted by law. The plan must also obtain your authorization to use or disclose your information for most marketing purposes or to sell your information. You may revoke your authorization in writing at any time except to the extent that the plan has taken action in reliance upon the authorization.
Your Rights
You have certain rights regarding your protected health information under the HIPAA privacy regulations. These rights include:
The right to inspect and copy your protected health information. For as long as the plan holds your protected health information, you may inspect and obtain a copy of the information included in a designated record set. A “designated record set” contains enrollment, payment, claims adjudication and case or medical management records systems maintained by or for the plan, as well as any other records the plan uses to make decisions regarding health care benefits provided to you. The plan may deny your request to inspect or copy your protected health information if the plan determines that the access requested is likely to endanger your life or safety or that of another person, or that it is likely to cause substantial harm to another person referred to in the information. You have the right to request a review of this decision.
In addition, you may not inspect or copy certain records by law, including:
information compiled in reasonable anticipation of, or for use in, a civil, criminal, or administrative action or proceeding; and
protected health information that is subject to a law that prohibits access to protected health information.
You have the right to have a decision to deny access reviewed in some situations. You must submit a written request to the plan’s Privacy Officer to inspect and copy your health information. The plan may charge you a fee for the costs of copying, mailing, or other costs incurred by the plan in complying with your request. Please contact the Privacy Officer at the number given at the end of this notice if you have any questions about access to your medical information.
The right to request a restriction on uses and disclosures of your protected health information. You may request that the plan not use or disclose specific sections of your protected health information for the purposes of payment or health care operations. Additionally, you may request that the plan not disclose your health information to family members or friends who may be involved in your care or for notification purposes described in this notice. In your request, you must specify the scope of restriction requested as well as the individuals for whom you want the restriction to apply. Your request should be directed to the Privacy Officer. The plan may choose to deny your request for a restriction, in which case the plan will notify you of its decision. Once the plan agrees to the requested restriction, the plan may not violate that restriction unless use or disclosure of the relevant information is needed to provide emergency treatment. The plan may terminate the agreement to a restriction in some cases.
The right to request to receive confidential communications from the plan by alternative means or at an alternative location. You have the right to request to receive communications of protected health information from the plan through alternative means or at an alternative location if you clearly state that the disclosure of all or part of that information could endanger you. The plan will make every effort to comply with reasonable requests. However, the plan may condition its compliance by asking you for information regarding the procurement of payment or specific information regarding an alternative address or other method of contact.
You are not required to provide an explanation for your request. Requests should be made in writing to the Privacy Officer.
The right to request an amendment of your protected health information. During the time that the plan holds your protected health information, you may request an amendment of your information in a designated record set. The plan may deny your request in some instances. However, should the plan deny your request for amendment, you have the right to file a statement of disagreement with the plan. In turn, the plan may develop a rebuttal to your statement. If it does so, the plan will provide you with a copy of the rebuttal. Requests for amendment must be submitted in writing to the Privacy Officer. Your written request must supply a reason to support the requested amendments.
The right to request an accounting of certain disclosures. You have the right to request an accounting of the plan’s disclosures of your protected health information made for the purposes other than payment or health care operations as described in this notice. The plan is not required to account for disclosures (1) you requested, (2) you authorized by signing an authorization form, (3) to friends or family members involved in your care and (4) certain other disclosures the plan is permitted to make without your authorization. The request for an accounting must be made in writing to the Privacy Officer and should state the time period that you wish the accounting to include, up to a six-year period. The plan is not required to provide an accounting for disclosures that took place prior to April 14, 2003. The plan will not charge you for the first accounting you request in any 12-month period. Subsequent accountings may require a fee based on the plan’s reasonable costs for compliance of the request.
The right to receive a paper copy of this notice. The plan will provide a separate paper copy of this notice upon request even if you have already been given a copy of it or have agreed to review it electronically.
The Plan’s Duties
The plan is required by law to ensure the privacy of your protected health information, to provide you with this notice of your rights and the plan’s legal duties and privacy practices, and to notify you in the event of a breach of your unsecured protected health information. The plan must abide by the terms of this notice, as may be amended periodically. The plan reserves the right to change the terms of this notice and to make the new notice provisions effective for all protected health information that the plan collects and maintains. If the plan alters its notice, the plan will provide a copy of the revised notice through regular mail or in person.
Complaints
If you believe that your privacy rights have been violated, you have the right to relay complaints to the plan and to the Secretary of the Department of Health and Human Services. You may provide complaints to the plan verbally or in writing. These complaints should be directed to the Privacy Officer. The plan encourages you to relay any concerns you may have regarding the privacy of your information. You will not be retaliated against in any way for filing a complaint.
Contact Person
The Plan’s contact person regarding the plan’s duties and your rights under the HIPAA privacy regulations is the Privacy Officer. The Privacy Officer can provide information regarding issues related to this notice by request. Complaints to the plan should be directed to the Privacy Officer at the following address:
HIPAA Privacy Officer
The Lubrizol Corporation
29400 Lakeland Boulevard – 491A
Wickliffe, OH 44092
The Privacy Officer can be contacted by telephone at 440-347-1757.