Health Alliance Plan
Alliance Health and Life Insurance Company
Last Review: September 2014
PHI stands for the words Protected Health Information. PHI is health information that includes your name, member ID number or other items that can be used to identify you.
Protecting the privacy of your personal and health information is important to HAP. We are required by law to maintain the privacy of your information and to provide you with notice of our legal duties and privacy practices. That is what this notice is for. It explains how we use information about you and when we can share that information with others. It also tells you about your rights with respect to your personal and health information and how you can use your rights. We are required to stand by the terms of this notice. If your information is subject to a breach (if it is used by or shared with someone who is not authorized to use or have your information), we are required to notify you in writing.
When we use the term "member information" or "information" in this notice, we are referring to the personal and health information about you that we collect when you fill out enrollment and other forms or when you obtain our services. We keep this information and use it to provide services to you and to operate HAP.
When we use the term "HAP," "we" or "us" in this notice, we are referring to Health Alliance Plan and its subsidiaries, including Alliance Health and Life Insurance Company.
We protect your PHI, whether it is written, spoken or in electronic form, by requiring employees and others who handle your information to follow specific confidentiality and technology usage policies. When they begin working for HAP, all employees and contractors must sign that they have reviewed HAP's policies and that they will protect member information even after they leave HAP. An employee or contractor's use of protected information is limited to the minimum amount of information necessary to perform a legitimate job function. Employees and contractors are also required to comply with this privacy notice and may not use or disclose your information except as described in this notice.
The following sections describe how HAP uses and shares your health information. We share your information only with those who have a "need to know" in order to perform the tasks listed below:
We may share your member information with your doctors, hospitals or other providers to help them provide medical care to you. If you are in the hospital for example, we may give them access to any medical records sent to us by your doctor.
We may use or share your member information with others to help manage your health care. For example, we might talk to your doctor to suggest a disease management or wellness program that could help improve your health.
We may use or share your member information to help us determine who is financially responsible for your medical bills.
We share your member information with affiliated companies as permitted by law, non-affiliated third parties with whom we contract to help us operate HAP and with others who are involved in providing or paying for health care services for you. We may share your information with others who help us conduct our business operations. If we do so, we will require these persons or entities to protect the privacy and security of your information and to return or destroy such information when it is no longer needed for our business operations.
HAP may also use or release your health information:
If one of the above reasons does not apply, we must get your written permission to use or disclose your member information. If you give us written permission and change your mind you may cancel your written permission at any time. Cancellation of your permission will not apply to any information we have already disclosed. We may ask you to complete a form when making a request. Once you give us authorization to release your member information, we cannot guarantee that the person to whom the information is provided will not disclose the information.
Other Uses of Health Information
The following are your rights with respect to your member information. If you would like to exercise the following rights, please contact us as described below, under "Who to Contact."
Your request to exercise any of the above member rights must be in writing and be signed by you or your representative. We may ask you to complete a form when making a request.
We may from time-to-time change the contents of this notice and reserve the right to do so. If we do so, the new notice will be effective for all the member information maintained by us. Once revised, we will provide the new notice to you by mail and post it on our website.
If you have any questions about this notice or about how we use or share member information, you may contact the HAP Office of Compliance by mail at:
Health Alliance Plan
Attn: Office of Compliance
2850 West Grand Blvd
Detroit, MI 48202
If you believe your privacy rights have been violated, you may file a complaint with us by contacting the Office of Compliance as noted above, or filing a grievance with the Customer Service Department. You may also notify the Secretary of the U.S. Department of Health and Human Services of your complaint. We will not take any action against you for filing a complaint.
Original Effective Date: 4/13/2003
Revisions: 2/05; 11/07; 9/13; 9/14
Reviewed: 11/08; 11/09; 10/11
Using the Internet to communicate with HAP is completely voluntary. You should read this statement to understand the benefits and risks of communicating over the Internet. If you do not choose to communicate with us over the Internet by sending us an email or using one of our Internet services requiring an ID and password, you browse our web site anonymously.
We automatically collect IP addresses and aggregate information on what web pages people use and the frequency and length of their visits. We use this information to evaluate and improve our web site. HAP also uses "cookie" technology to obtain information from its online visitors by placing a small text file on your hard drive. The file is time-sensitive and expires after several minutes to increase the security of your session and data. Data is encrypted when stored on our servers or in cookies. We do not collect any information that can be used to personally identify you unless you voluntarily register to use one of our Internet services requiring an ID and password, or send an email to us.
Health Alliance Plan may purchase consumer information from third party sources to be aggregated and used for marketing purposes for people who are not current HAP members. If you prefer not to have your information from third parties used for marketing purposes, please notify the HAP Customer Services department in writing. Mail your request to:
Health Alliance Plan
2850 W. Grand Blvd
Detroit, MI 48202
Attn: Customer Services
HAP is committed to protecting the privacy of the personal information you provide to us over the Internet. All information is protected by our privacy policies, which we periodically review and update.
If you choose to communicate with us over the Internet, we may request personally identifiable information from you necessary for us to process your request for information, respond to your questions or deliver a product or service. Personally identifiable information is any information that can be used to identify you, such as your name, address, web address or HAP number. When you send information to us using email or through one of our Internet services requiring an ID and password, the information may be shared with our employees and contractors who need to know the information to respond to your request and as permitted by law. We keep some of this information for a period of time as determined necessary by us.
Information collected when you respond to surveys and promotions on our web site will be used for internal purposes, including developing web site information and services. We may inform you of new products and services from HAP based on the information you provide us.
There are a number of risks you should consider before using email to communicate with us: email can be circulated, forwarded and stored in numerous paper and electronic files; email can be intercepted, altered, forwarded or used without authorization or detection; email senders can easily misaddress an email; backup copies of email may exist even after the sender deletes the email; employers and online services have the right to inspect email transmitted through their systems; email is easier to falsify than handwritten or signed documents; and email can be used to introduce viruses into computer systems. Confidentiality of Internet communications cannot be guaranteed by HAP. Use of the Internet is solely at your own risk.
We have links from our web site to a number of different health care related web sites. When you click on one of these links, you leave www.hap.org and link to another web site not controlled by HAP. We do not control the privacy policies or security measures of any these health care related sites. You should read the privacy statements on the other sites you visit to understand their privacy practices.
HAP has taken steps to make all information received from our online visitors as secure as possible against unauthorized access and use. All information is protected by our security measures, which we periodically review and update.
We use security technology to protect you during your Internet communications with us. This security includes server authentication, privacy using encryption, and data integrity. Your personal information is protected from unauthorized access by a secure firewall and security infrastructure. During transmission of information using one of our Internet services requiring an ID and password, your privacy is protected by Secure Socket Layer (SSL) 2048-bit encrypting software. We employ extensive physical, electronic and procedural safeguards to maintain the security of your information. HAP also conducts periodic reviews of its web security to ensure that our electronic security safeguards remain up-to-date and effective.
You must take all reasonable precautions to safeguard your Identification Number (ID). This ID allows the user to access confidential information. Such access is provided solely to facilitate the performance of legitimate business functions. Please ensure that you share your ID only with those individuals who require such access to perform legitimate business functions on your behalf. You remain responsible for any use, or misuse, of your ID by you or your employees or agents.
There are things you can do to improve the privacy and security of your Internet communications. Here are a few of them:
If you prefer not to have your information available in Member Services Online, please notify the HAP Customer Service Department in writing. Mail your request to:
Health Alliance Plan
2850 W. Grand Blvd
Detroit, MI 48202
Attn: Customer Service
Once this request is processed, the system will not allow you or anyone to register online and use Member Services Online. If you decide you want to remove this restriction after opting out, notify the Customer Service Department in writing at the above address. You should also contact Customer Service if you receive email from us that you do not wish to receive in the future.
We periodically review and update our privacy policies and security measures. When we do so we may need to change or update this statement and reserve the right to do so. All updates and changes automatically apply to you without notice.
If you do not believe that the policies in this Internet Privacy Statement give you the Internet privacy and security protection you need, you have the ability and right to stop interacting with HAP over the Internet by exiting this web site now.