NOTICE OF PRIVACY PRACTICES

For Individuals Enrolled in the College Choice Health Plan (CCHP) and the College Choice Dental Plan (CCDP)

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

The State of Illinois, Department of Central Management Services, Bureau of Benefits (Bureau), and the Department of Healthcare and Family Services are charged with the administration of the self-funded plans available through the State Employees Group Insurance Act. These plans include the College Choice Health Plan and the College Choice Dental Plan. The term “we” in this Notice means the Bureau, the Department of Healthcare and Family Services and our Business Associates (health plan administrators).

We are required by federal and state law to maintain the privacy of your Protected Health Information (PHI). We are also required by law to provide you with this Notice of our legal duties and privacy practices concerning your PHI. For uses and disclosures not covered by this Notice, we will seek your written authorization. You may revoke an authorization at any time; however, the revocation will only affect future uses or disclosures.

The Department of Healthcare and Family Services contracts with Business Associates to provide services including claim processing, utilization review, behavioral health services and prescription drug benefits. These Business Associates receive health information protected by the privacy requirements of the Health Insurance Portability and Accountability Act and act on our behalf in performing their respective functions. When we seek help from individuals or entities in our treatment, payment, or health care operations activities, we require those persons to follow this Notice unless they are already required by law to follow the federal privacy rule. CIGNA HealthCare is the Medical Plan Administrator. Intracorp (a CIGNA HealthCare Affiliate) is the Notification and Medical Case Management Administrator. Medco Health Solutions is the Prescription Drug Plan Administrator. Magellan Behavioral Health is the Behavioral Health Administrator. CompBenefits is the Dental Plan Administrator. If you have insured health coverage, such as an HMO, you will receive a notice from the HMO regarding its privacy practices.

How We May Use or Disclose Your PHI:

Treatment: We may use or disclose PHI to health care providers who take care of you. For example, we may use or disclose PHI to assist in coordinating health care or services provided by a third party. We may also use or disclose PHI to contact you and tell you about alternative treatments, or other health-related benefits we offer. If you have a friend or family member involved in your care, with your express or implied permission, we may give them PHI about you.

Payment: We use and disclose PHI to process claims and make payment for covered services you receive under your benefit plan. For example, your provider may submit a claim for payment. The claim includes information that identifies you, your diagnosis, and your treatment.

Health Care Operations: We use or disclose PHI for health care operations. For example, we may use your PHI for customer service activities and to conduct quality assessment and improvement activities.

Appointment Reminders: Through a Business Associate, we may use or disclose PHI to remind you of an upcoming appointment.

Legal Requirements:

We may use and disclose PHI as required or authorized by law. For example, we may use or disclose your PHI for the following reasons.

Public Health: We may use and disclose PHI to prevent or control disease, injury or disability, to report births and deaths, to report reactions to medicines or medical devices, to notify a person who may have been exposed to a disease, or to report suspected cases of abuse, neglect or domestic violence.

Health Oversight Activities: We may use and disclose PHI to state agencies and federal government authorities when required to do so. We may use and disclose your health information in order to determine your eligibility for public benefit programs and to coordinate delivery of those programs. For example, we must give PHI to the Secretary of Health and Human Services in an investigation into compliance with the federal privacy rule.

Judicial and Administrative Proceedings: We may use and disclose PHI in judicial and administrative proceedings. In some cases, the party seeking the information may contact you to get your authorization to disclose your PHI.

Law Enforcement: We may use and disclose PHI in order to comply with requests pursuant to a court order, warrant, subpoena, summons, or similar process. We may use and disclose PHI to locate someone who is missing, to identify a crime victim, to report a death, to report criminal activity at our offices, or in an emergency.

Avert a Serious Threat to Health or Safety: We may use or disclose PHI to stop you or someone else from getting hurt.

Work-Related Injuries: We may use or disclose PHI to workers’ compensation or similar programs in order for you to obtain benefits for work-related injuries or illness.

Coroners, Medical Examiners, and Funeral Directors: We may use or disclose PHI to a coroner or medical examiner in some situations. For example, PHI may be needed to identify a deceased person or determine a cause of death. Funeral directors may need PHI to carry out their duties.

Organ Procurement: We may use or disclose PHI to an organ procurement organization or others involved in facilitating organ, eye, or tissue donation and transplantation.

Release of Information to Family Members: In an emergency, or if you are not able to provide permission, we may release limited information about your general condition or location to someone who can make decisions on your behalf.

Armed Forces: We may use or disclose the PHI of Armed Forces personnel to the military for proper execution of a military mission. We may also use and disclose PHI to the Department of Veterans Affairs to determine eligibility for benefits.

National Security and Intelligence: We may use or disclose PHI to maintain the safety of the President or other protected officials. We may use or disclose PHI for national intelligence activities.

Correctional Institutions and Custodial Situations: We may use or disclose PHI to correctional institutions or law enforcement custodians for the safety of individuals at the correctional institution, those who are responsible for transporting inmates, and others.

Research: You will need to sign an authorization form before we use or disclose PHI for research purposes except in limited situations where special approval has been given by an Institutional Review or Privacy Board. For example, if you want to participate in research or a clinical study, an authorization form must be signed.

Fundraising and Marketing: We do not undertake fundraising activities. We do not release PHI to allow other entities to market products to you.

Plan Sponsors: Your employer is not permitted to use PHI for any purpose other than the administration of your benefit plan. If you are enrolled through a unit of local government, we may disclose summary PHI to your employer, or someone acting on your employer’s behalf, so that it can monitor, audit or otherwise administer the employee health benefit plan that the employer sponsors and in which you participate.

Illinois Law: Illinois law also has certain requirements that govern the use or disclosure of your PHI. In order for us to release information about mental health treatment, genetic information, your AIDS/HIV status, and alcohol or drug abuse treatment, you will be required to sign an authorization form unless Illinois law allows us to make the specific type of use or disclosure without your authorization.

Your Rights:

You have certain rights under federal privacy laws relating to your PHI. To exercise these rights, you must submit your request in writing to the appropriate plan administrator. These plan administrators are as follows:

Restrictions: You have a right to request restrictions on how your PHI is used for purposes of treatment, payment and health care operations. We are not required to agree to your request.

Communications: You have a right to receive confidential communications about your PHI. For example, you may request that we only call you at home or that we send your mail to another address. If your request is put in writing and is reasonable, we will accommodate it. If you feel you may be in danger, just tell us you are “in danger” and we will accommodate your request.

Inspect and Access: You have a right to inspect information used to make decisions about you. This information includes billing and medical record information. You may not inspect your record in some cases. If your request to inspect your record is denied, we will send you a letter letting you know why and explaining your options.

You may copy your PHI in most situations. If you request a copy of your PHI, we may charge you a fee for making the copies. If you ask us to mail your records, we may also charge you a fee for mailing the records.

Amendment of your Records: If you believe there is an error in your PHI, you have a right to make a request that we amend your PHI. We are not required to agree with your request to amend. We will send you a letter stating how we handled your request.

Accounting of Disclosures: You have a right to receive an Accounting of Disclosures that we have made of your PHI for purposes other than treatment, payment, and health care operations, or disclosures made pursuant to your authorization. We may charge you a fee if you request more than one Accounting in a 12-month period.

Copy of Notice and Changes to the Notice: You have a right to obtain a paper copy of this Notice, even if you originally obtained the Notice electronically. We are required to abide with terms of the Notice currently in effect; however, we may change this Notice. Changes to the Notice are applicable to the health information we already have. If we materially change this Notice, you will receive a new Notice within sixty (60) days of the material change. You can also access a revised Notice on our website at “http://www.benefitschoice.il.gov”.

Complaints: If you feel that your privacy rights have been violated, you may file a complaint by contacting the Privacy Officer of the respective plan administrator. If the Privacy Officer does not handle your complaint or request adequately, please contact the Central Management Services, Privacy Officer, Department of Central Management Services, 401 South Spring, Room 720, Springfield, Illinois 62706, 217-782-9669. We will not retaliate against you for filing a complaint. You may also file a complaint with the Secretary of Health and Human Services in Washington, D.C. if you feel your privacy rights have been violated. EFFECTIVE DATE: July 1, 2006