Protected Health Information.

Any individually identifiable health information—including diagnoses, treatment plans, billing records, and demographic data tied to a member.

Staff access only the minimum PHI necessary to perform their job duties. Access reviews are conducted quarterly.

We disclose PHI for treatment, payment, and healthcare operations as permitted by HIPAA, or with member authorization. All disclosures are logged.

Suspected breaches trigger immediate investigation. Affected members are notified within the timelines required by the HIPAA Breach Notification Rule.