Eastern Illinois University Logo
EIU |

HIPAA

Health Insurance Portability and Accountability Act

Privacy Mandates

This notice describes how medical information about you may be used and disclosed and how you can get access to this information.

Please review it carefully. The privacy of your medical information is important to us.

Our Legal Duty

We are required by applicable federal and state law to maintain the privacy of your medical information. We are also required to give you this notice about our privacy practices, our legal duties, and your rights concerning your medical information. We must follow the privacy practices that are described in this notice while it is in effect. This notice takes effect April 14, 2004, and will remain in effect unless we replace it.

We reserve the right to change our privacy practices and the terms of this notice at any time, provided such changes are permitted by applicable law. We reserve the right to make changes in our privacy practices and the new terms of our notice effective for all medical information that we maintain, including medical information we created or received before we made the changes. Before we make a significant change in our privacy practices, we will change this notice and send the new notice to our health plan subscribers at the time of the change.

You may request a copy of our notice at any time. For more information about our privacy practices, or for additional copies of this notice, please contact us using the information at the end of this notice.

Uses and Disclosures of Medical Information

Treatment: We may disclose your medical information, without your permission, to a physician or other health care provider to treat you.

Payment: We may use and disclose your medical information, without your permission, to pay claims from physicians, hospitals, and other health care providers for services delivered to you that are covered by your health plan, to determine your eligibility for benefits, to coordinate your benefits with other payers, to determine the medical necessity of care delivered to you, to obtain premiums for your health coverage, to issue explanations of benefits to you, and the like. We may disclose your medical information to a health care provider or another health plan to obtain payment or engage in other payment activities.

Health Care Operations: We may use and disclose your medical information, without your permission, for health care operations. Health care operations include:

  • Health care quality assessment and improvement activities;
  • Conducting or arranging for medical reviews, audits, and legal services, including fraud and abuse detection and prevention;
  • Underwriting and premium rating our risk for health coverage, and obtaining stop-loss and similar reinsurance for our health coverage obligations; and
  • Business planning, development, management, and general administration, including customer service, grievance resolution, claims payment and health coverage improvement activities.

We may disclose your medical information to another health plan or to a health care provider subject to federal privacy protection laws, as long as the plan or provider has or had a relationship with you and the medical information is for that plan's or provider's health care quality assessment and improvement activities, competence and qualification evaluation and review activities, or fraud and abuse detection and prevention.

Your Authorization: You may give us written authorization to use your medical information or to disclose it to anyone for any purpose. If you give an authorization, you may revoke it in writing at any time. Your revocation will not affect any use or disclosure permitted by your authorization while it was in effect. Unless you give us a written authorization, we will not use or disclose your medical information for any purpose other than those described in this notice.

Family, Friends, and Others Involved in Your Care of Payment for Care: We may disclose your medical information to a family member, friend or any other person you involve in your health care or payment for your health care. We will disclose only the medical information that is relevant to the person's involvement. We may use or disclose your name, location, and general condition to notify, or to locate and notify, a person responsible for your health care in appropriate situations, such as a medical emergency or during disaster relief efforts.

Before we make such a disclosure, we will provide you with an opportunity to object. If you are not present or are incapacitated or it is an emergency or disaster relief situation, we will use our professional judgment to determine whether disclosing your medical information is in your best interest under the circumstances.

Public Health and Benefit Activities: We may use and disclose your medical information, without your permission, when required by law, and when authorized by law for the following kinds of public health and interest activities, judicial and administrative proceedings, law enforcement, research, and other public benefit functions.

  • For public health, including to report disease and vital statistics, child abuse, and adult abuse, neglect or domestic violence;
  • To avert a serious and imminent threat to health or safety;
  • For health care oversight, such as activities of state insurance commissioners, licensing and peer review authorities, and fraud prevention enforcement agencies.
  • For research;
  • In response to court and administrative orders and other lawful process;
  • To law enforcement officials with regard to crime victims, crimes on our premises, crime reporting in emergencies, and identifying or locating suspects or other persons;
  • To coroners, medical examiners, funeral directors, and organ procurement organizations;
  • To the military, to federal officials for lawful intelligence, counterintelligence, and national security activities, and to correctional institutions and law enforcement regarding persons in lawful custody; and
  • As authorized by state worker's compensation laws.

Individual Rights

Access: You have the right to examine and to receive a copy of your medical information, with limited exceptions. You must make a written request to obtain access to your medical information. You should submit your request to the contact at the end of this notice. You may obtain a form from that contact to make your request.

We may charge you reasonable, cost-based fees for a copy of your medical information, for mailing the copy to you, and for preparing any summary or explanation of your medical information you request. Contact us using the information at the end of this notice for information about our fees.

Disclosure Accounting: You have the right to a list of instances after April 13, 2004 in which we disclose your medical information for purpose other than treatment, payment, health care operations, as authorized by you, and for certain other activities.

You should submit your request to the contact at the end of this notice. You may obtain a form from that contact to make your request. We will provide you information about each accountable disclosure that we made during the period for which you request the accounting, except we are not obligated to account for a disclosure that occurred more than 6 years before the date of your request and never for a disclosure that occurred before April 14, 2004. If you request this accounting more than once in a 12-month period, we may charge you a reasonable, cost-based fee for responding to your additional requests. Contact us using the information at the end of this notice for information about our fees.

Amendment: You have the right to request that we amend your medical information. Your request must be in writing, and it must explain why the information should be amended. You should submit your request to the contact at the end of this notice. You may obtain a form from that contact to make your request.

We may deny your request only for certain reasons. If we deny your request, we will provide you a written explanation. If we accept your request, we will make your amendment part of your medical information and use reasonable efforts to inform others of the amendment who we know may have and rely on the unamended information to your detriment, as well as persons you want to receive the amendment.

Restrictions: You have the right to request that we restrict our use or disclosure of your medical information for treatment, payment, or health care operations, or with family, friends or others you identify. We are not required to agree to your request. If we do agree, we will abide by our agreement, except in a medical emergency or as required by law. You should submit your request to the contact at the end of this notice. You may obtain a form from that contact to make your request. Any agreement we may make to a request for restriction must be in writing signed by a person authorized to bind us to such an agreement.

Confidential Communication: You have the right to request that we communicate with you about your medical information in confidence by alternative means or to alternative locations that you specify. You must make your request in writing, and your request must represent that the information could endanger you if it is not communicated in confidence as you request. You should submit your request to the contact at the end of this notice. You may obtain a form from that contact to make your request.

We will accommodate your request if it is reasonable, specifies the alternative means or location for confidential communication, and continues to permit us to collect premiums and pay claims under your health plan, including issuance of explanations of benefits to you.

Electronic Notice: If you receive this notice on our web site or by electronic mail (e-mail), you are entitled to receive this notice in written form. Please contact us using the information at the end of this notice to obtain this notice in written form.

Questions and Complaints

If you want more information about our privacy practices or have questions or concerns, please contact us using the information at the end of this notice.

If you are concerned that we may have violated your privacy rights, or you disagree with a decision we made about access to your medical information, in response to a request you made to amend, restrict the use or disclosure of, or communicate in confidence about your medical information, you may complain to us using the contact information at the end of this notice. You may also submit a written complaint to the Office for Civil Rights of the United States Department of Health and Human Services, 233 N. Michigan Ave. – Suite 240, Chicago, IL 60601. You may contact the Office Of Civil Rights' Hotline at 1-800-368-1019.

We support your right to the privacy of your medical information. We will not retaliate in any way if you choose to file a complaint with us or with the U.S. Department of Health and Human Services.

Contact Office: Student Health Insurance
Telephone: 217-581-7507
Fax: 217-581-6422
E-Mail: lkheddins@eiu.edu
Address: Student Services Building

Contact Office: EIU Privacy Officer
Telephone: 217-581-6396
Fax: 217-581-3899
E-Mail: bkcalloway@eiu.edu
Address: Human Services Building