HIPAA (Full-Time Actives)

How is my personal health information (PHI) protected?

The PSC-CUNY Welfare Fund is bound by federal regulations promulgated pursuant to the Health Insurance Portability and Accountability Act of 1996 (HIPAA). The Fund is in full compliance with all relevant parts of the Act. The full text of HIPAA can be found through the HIPAA website of the Office for Civil Rights (OCR). There are four components of HIPAA that impact participants of this Fund: Portability, Non-Discrimination, Privacy and Security.

Portability

The portability provisions of HIPAA provide rights and protections for participants and beneficiaries who move from one group health plan to another. HIPAA includes protections for coverage under group health plans that limit exclusions for preexisting conditions and allows a special opportunity to enroll in a new plan to individuals in certain circumstances.

When your eligibility for health benefits from the Fund ends, or if you terminate coverage with the Fund, you, your spouse, and/or your dependents are entitled to a statement of covered benefits called a “Certificate of Creditable Coverage,” which you may present in the course of enrolling in a new group health plan.

Certificates of Creditable Coverage indicate the period of time you, your spouse, and/or your dependents were entitled to Welfare Fund benefits, as well as certain additional information required by law. The Certificate of Creditable Coverage may be necessary if you, your spouse, and/or your dependents become eligible for coverage under another group health plan, or if you buy a health insurance policy within sixty-three (63) days after your eligibility for Welfare Fund benefits ends. The Certificate of Creditable Coverage is necessary because it may reduce or eliminate exclusion for pre-existing coverage periods that may apply to you, your spouse, and/or your dependents under the new group health plan or health insurance policy. The Certificate of Creditable Coverage will be provided to you if you should request it within twenty-four (24) months after your eligibility for Welfare Fund benefits ends.

You should retain the Certificate(s) of Creditable Coverage as proof of prior coverage for your new health plan. For further information, contact the Fund Office.

Non-Discrimination

HIPAA prohibits discrimination against employees and dependents based on their health status.

Privacy

The privacy provisions of HIPAA were issued to protect the health information that identifies individuals who are living or deceased. The rule balances an individual’s interest in keeping his or her health information confidential with other business, practical and social benefits.

PHI is defined as individually identifiable health information, held or maintained by a covered entity or its business associates acting for the covered entity, which is transmitted or maintained in any form or medium (including the individually identifiable health information of non-U.S. citizens). This includes identifiable demographic and other information relating to the past, present, or future physical or mental health or condition of an individual, or the provision or payment of health care to an individual that is created or received by a health care provider, health plan, employer, or health care clearinghouse. For purposes of the Privacy Rule, genetic information is considered to be health information.

Obligations of the Fund to use or disclose PHI

• When requested by a plan participant.
• When required by city, state or federal law or requested in the course of an inquiry into the Fund’s compliance with federal privacy law.

Rights of the Fund to disclose the minimal necessary PHI without authorization

• To facilitate treatment or to coordinate or manage health care with covered providers, vendors or insurers, or to facilitate payment by provision of information regarding eligibility to covered providers, vendors or insurers.
• To promote quality assurance in support or programs designed to enhance quality of care with covered providers, vendors or insurers or to contact the participant for the provision of information designed to better avail plan features.
• In response to public health risks, to report reactions to medications, or to report victims of abuse, neglect or domestic violence, or in response to a court or administrative order, subpoena, discovery request or other lawful process, but only after reasonable efforts have been made to inform the participant.
• To comply with workers’ compensation laws and other similar legally established programs which provide benefits for work-related injuries or illnesses.

Rights of the Fund to disclose PHI with authorization

• To a family member or other person identified by the participant as involved in a participant’s health care or who assists in the payment of health care unless the Fund is duly notified to restrict the disclosure. If a family member contacts the Fund on behalf of a participant requesting PHI relating to treatment or payment for treatment, the Fund will, upon verification by requesting certain information (such as your Social Security number and date of birth) release such PHI to a family member unless a participant indicates to the Fund in writing to not disclose PHI in those circumstances.

Rights of the participants regarding PHI disclosure

• To inspect and copy the PHI that the Fund maintains, to request that the Fund amend PHI, to receive an accounting of the Plan’s disclosures of your PHI or to request a restriction on the uses and/or disclosures of PHI for treatments or payments, or to someone who is involved in the care rendered. The Fund is not required to agree to a restriction or amendment that is not in writing or does not include a reason that supports the request.

Participants who believe privacy rights have been violated, may file a complaint with the Fund or with the U.S. Department of Health and Human Services.

Security

The Security provisions of HIPAA establish a series of administrative, technical, and physical security procedures for this Fund to assure the confidentiality of electronic protected health information (EPHI). The standards are delineated into either required or addressable implementation specifications.

Much of the focus is on electronic transmission and storage of data. The PSC-CUNY Welfare Fund has taken all necessary measures to assure full compliance with the security regulations set forth. Information related to Security compliance may be reviewed upon request at the Fund office.