THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

HealthLink has been authorized by the State of Illinois, Department of Central Management Services, Bureau of Benefits (Bureau) to provide comprehensive health care services through contractual arrangements with hospitals and other providers within the Plan's service area for managed care available under the State Employees Group Insurance Act for State employees, the Local Government Health Program, the Teachers' Retirement Insurance Program and the College Insurance Program. As a Business Associate of the Bureau, HealthLink receives health information protected by the privacy requirements of the Health Insurance Portability and Accountability Act. This Notice outlines the Bureau's Notice of Privacy Practices for protected health information held by HealthLink. The term "we" in this Notice means the Bureau and HealthLink.

We are required by federal and state law to maintain the privacy of your Protected Health Information (PHI). The Bureau is also required by law to provide you with this Notice of our legal duties and privacy practices concerning your PHI. For uses and disclosures not covered by this Notice, we will seek your written authorization. You may revoke an authorization at any time; however, the revocation will only affect future uses or disclosures.

When we seek help from individuals or entities who are not part of the Bureau or HealthLink in our treatment, payment, or health care operations activities, we require those persons to follow this Notice unless they are already required by law to follow the federal privacy rule.

How We May Use or Disclose Your PHI:
Treatment: We may use or disclose PHI to health care providers who take care of you. For example, we may use or disclose PHI to assist in coordinating health care or services provided by a third party.

We may also use or disclose PHI to contact you and tell you about alternative treatments, or other health-related benefits we offer. If you have a friend or family member involved in your care, with your express or implied permission, we may give them PHI about you.

Payment: We use and disclose PHI to process claims and make payment for covered services you receive under your benefit plan. For example, your provider may submit a claim for payment. The claim includes information that identifies you, your diagnosis, and your treatment.

Health Care Operations: We use or disclose PHI for health care operations. For example, we may use your PHI for customer service activities and to conduct quality assessment and improvement activities.

Appointment Reminders: Through a Business Associate, we may use or disclose PHI to remind you of an upcoming appointment.

Legal Requirements:
We may use and disclose PHI as required or authorized by law. For example, we may use or disclose your PHI for the following reasons:

Public Health: We may use and disclose PHI to prevent or control disease, injury or disability, to report births and deaths, to report reactions to medicines or medical devices, to notify a person who may have been exposed to a disease, or to report suspected cases of abuse, neglect or domestic violence.

Health Oversight Activities: We may use and disclose PHI to state agencies and federal government authorities when required to do so. We may use and disclose your health information in order to determine your eligibility for public benefit programs and to coordinate delivery of those programs. For example, we must give PHI to the Secretary of Health and Human Services in an investigation into compliance with the federal privacy rule.

Judicial and Administrative Proceedings: We may use and disclose PHI in judicial and administrative proceedings. In some cases, the party seeking the information may contact you to get your Authorization to disclose your PHI.

Law Enforcement: We may use and disclose PHI in order to comply with requests pursuant to a court order, warrant, subpoena, summons, or similar process. We may use and disclose PHI to locate someone who is missing, to identify a crime victim, to report a death, to report criminal activity at our offices, or in an emergency.

Avert a Serious Threat to Health or Safety: We may use or disclose PHI to stop you or someone else from getting hurt.

Work-Related Injuries: We may use or disclose PHI to worker's compensation or similar programs in order for you to obtain benefits for work-related injuries or illnesses.

Coroners, Medical Examiners, and Funeral Directors: We may use or disclose PHI to a coroner or medical examiner in some situations. For example, PHI may be needed to identify a deceased person or determine a cause of death. Funeral directors may need PHI to carry out their duties.

Organ Procurement: We may use or disclose PHI to an organ procurement organization or others involved in facilitating organ, eye, or tissue donation and transplantation.

Release of Information to Family Members: In an emergency, or if you are not able to provide permission, we may release limited information about your general condition or location to someone who can make decisions on your behalf.

Armed Forces: We may use or disclose the PHI of Armed Forces personnel to the military for proper execution of a military mission. We may also use and disclose PHI to the Department of Veterans Affairs to determine eligibility for benefits.

National Security and Intelligence: We may use or disclose PHI to maintain the safety of the President or other protected officials. We may use or disclose PHI for national intelligence activities.

Correctional Institutions and Custodial Situations: We may use or disclose PHI to correctional institutions or law enforcement custodians for the safety of individuals at the correctional institution, those that are responsible for transporting inmates, and others.

Research: You will need to sign an authorization form before we use or disclose PHI for research purposes except in limited situations where special approval has been given by an Institutional Review or Privacy Board. For example, if you want to participate in research or a clinical study, an Authorization form must be signed.

Fundraising and Marketing: We do not undertake fundraising activities. We do not release PHI to allow other entities to market products to you.

Plan Sponsors: Your employer is not permitted to use the PHI for any other purpose other than the administration of your benefit plan. If you are enrolled through a unit of local government, we may disclose summary PHI to your employer, or someone acting on your employer's behalf, so that it can monitor, audit or otherwise administer the employee health benefit plan that the employer sponsors and in which you participate.

Illinois Law: Illinois law also has certain requirements that govern the use or disclosure of your PHI. In order for us to release information about mental health treatment, genetic information, your AIDS/HIV status, and alcohol or drug abuse treatment, you will be required to sign an authorization form unless Illinois law allows us to make the specific type of use or disclosure without your authorization.

Your Rights:
You have certain rights under federal privacy laws relating to your PHI. To exercise these rights, you must submit your request in writing in care of HealthLink.

Restrictions: You have a right to request restrictions on how your PHI is used for purposes of treatment, payment and health care operations. We are not required to agree to your request.

Communications: You have a right to receive confidential communications about your PHI. For example, you may request that we only call you at home or that we send your mail to another address. If your request is put in writing and is reasonable, we will accommodate it. If you feel you may be in danger, just tell us you are "in danger" and we will accommodate your request.

Inspect and Access: You have a right to inspect information used to make decisions about you. This information includes billing and medical record information. You may not inspect your record in some cases. If your request to inspect your record is denied, we will send you a letter letting you know why and explaining your options.

You may copy your PHI in most situations. If you request a copy of your PHI, we may charge you a fee for making the copies. If you ask us to mail your records, we may also charge you a fee for mailing the records.

Amendment of your Records: If you believe there is an error in your PHI, you have a right to make a request that we amend your PHI. We are not required to agree with your request to amend. We will send you a letter stating how we handled your request.

Accounting of Disclosures: You have a right to receive an Accounting of Disclosures that we have made of your PHI for purposes other than treatment, payment, and health care operations, or disclosures made pursuant to your authorization. We may charge you a fee if you request more than one Accounting in a 12-month period.

Copy of Notice and Changes to the Notice: You have a right to obtain a paper copy of this Notice, even if you originally obtained the Notice electronically. We are required to abide with terms of the Notice currently in effect; however, we may change this Notice. Changes to the Notice are applicable to the health information we already have. If we materially change this Notice, you will receive a new Notice within sixty (60) days of the material change. You can also access a revised Notice on the website: www.healthlink.com. Go to the tab entitled Tell Us Who You Are; select "I am a health plan participant;" then, go to the tab entitled State Sponsored Health Plan; select "State of Illinois Plan Participants;" then click on the title "Notice of Privacy Practices."

Complaints: If you feel that your privacy rights have been violated, you may file a complaint by contacting the Privacy Office at HealthLink in care of Privacy Office, P.O. Box 411424, St. Louis, MO 63141, 1-800-624-2356. If the respective Privacy Officer does not handle your complaint or request adequately, please contact the Central Management Services Privacy Officer at the Office of the Chief Counsel, Privacy Officer, Department of Central Management Services, 401 South Spring, Room 720, Springfield, Illinois 62706, 217-782-9669. We will not retaliate against you for filing a complaint. You may also file a complaint with the Secretary of Health and Human Services in Washington, D.C. if you feel your privacy rights have been violated.

EFFECTIVE DATE: April 14, 2005

Bureau of Benefits/Illinois-Privacy Notice to Plan Enrollees
04/02/2008