What this notice is for and how to get it in Spanish
The notice says it describes how medical information about you may be used and disclosed and how you can get access to that information, and it asks you to review it carefully. To get the notice in Spanish, you call the toll-free number on your member ID card.
Supporting quotations
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION.
PLEASE REVIEW IT CAREFULLY.
To receive this Notice in Spanish, please call the toll-free number on your member ID card.
Qualifications & exceptions
The Spanish copy is obtained by calling the toll-free number on your member ID card (the Spanish line in the source is only the instruction to call).
Not stated here
The Spanish-language version of the notice is not part of the text supplied, so this analysis cannot say whether it matches the English text.
Legal Rights & Agreement Rules · Restriction or exception
Covers Aetna insured plans, not employer self-funded plans
The notice is for Aetna insured health benefit plans. It does not apply to plans that an employer self-funds. If you have coverage through work, you are told to ask your employer whether your plan is insured or self-funded, and if it is self-funded to ask for a copy of your employer's own privacy notice.
Supporting quotations
This Notice of Privacy Practices is for Aetna insured health benefit plans.
It does not apply to any plans that are self-funded by an employer.
If you have coverage where you work, ask your employer if your plan is insured or self-funded.
If it’s self-funded, ask for a copy of your employer’s Privacy Notice.
Qualifications & exceptions
The reader has to find out from their employer whether their plan is insured or self-funded; the notice does not tell them.
Not stated here
The notice text does not name the plan types it covers beyond "insured health benefit plans", so whether a given dental, pharmacy, behavioral health or vision plan is insured must be confirmed outside this document.
An employer's own privacy notice for a self-funded plan is not supplied.
Legal Rights & Agreement Rules · Context
Effective date: October 1, 2025
The notice states that it took effect on October 1, 2025.
Supporting quotations
Effective date: This Notice took effect on October 1, 2025.
Not stated here
A form code near the end of the contents list reads "GR-67806 (2-26)"; the notice does not explain it, so no later revision date is assumed.
Legal Rights & Agreement Rules · Permission or license
Workers' compensation, law enforcement, legal proceedings and legal requirements
Aetna may share PHI to comply with workers' compensation laws; with government law enforcement officials as permitted or required by law; in response to a court order or other lawful process; and to comply with legal obligations and requirements.
Supporting quotations
Workers’ Compensation – to comply with workers’ compensation laws.
Law Enforcement – to Government law enforcement officials as permitted or required by law.
Legal Proceedings – in response to a court order or other lawful process.
As Required by Law – to comply with legal obligations and requirements.
Qualifications & exceptions
Law enforcement disclosures are tied to what the law permits or requires, and legal-proceeding disclosures to a court order or other lawful process.
The notice later says that stricter state or federal law may protect certain sensitive information (for example mental health, HIV/AIDS, reproductive health, substance use disorder) and that Aetna follows the stricter law where it applies to it.
Not stated here
The notice does not list which laws or processes qualify, or say whether you are told about these disclosures.
Legal Rights & Agreement Rules · Restriction or exception
Stricter laws for sensitive information; Aetna follows the stricter one
The notice says some state and federal laws may require special privacy protections, including certain requirements to obtain attestations from requestors, that limit the use and disclosure of certain sensitive health information. The categories it lists are alcohol or substance use disorder, biometric information, child or adult abuse or neglect (including sexual assault), communicable diseases, genetic information, HIV/AIDS, mental health, minors, reproductive health, and sexually transmitted diseases. Aetna says it will follow the law that is stricter, or more protective of your PHI, where it applies to Aetna. For more information about these additional restrictions, contact the Aetna Privacy Office.
Supporting quotations
Additional Restrictions on Use and Disclosure
Some state and federal laws may require special privacy protections, including certain requirements to obtain attestations from requestors, that limit the use and disclosure of certain sensitive health information. Such laws may protect information related to:
Alcohol or substance use disorder
Biometric Information
Child or adult abuse or neglect, including sexual assault
Communicable diseases
Genetic information
HIV/AIDs
Mental health
Minors
Reproductive health
Sexually transmitted diseases
We will follow the law that is stricter (or more protective of your PHI), where it applies to
If you would like additional information about additional use or disclosure restrictions that may apply to your sensitive PHI, please contact the Aetna Privacy Office.
Qualifications & exceptions
The laws are described as ones that "may" apply; the protections apply only where a law covers Aetna and the information.
The sentence about following the stricter law is split across two source blocks ("where it applies to" and "us"); the second block continues the same sentence.
Not stated here
The notice does not name the specific state or federal laws or say which jurisdictions' laws apply to a given member.
The notice does not say how the attestation requirement works.
Cross-references
qualifies (model-proposed): Further disclosures that need no authorization, by category — qualifies: Aetna says it follows the stricter or more protective law where it applies, which qualifies the further disclosures listed as allowed without authorization.
Legal Rights & Agreement Rules · Restriction or exception
Substance use disorder information is not used in legal cases against you without consent or a court order
Aetna says it will not use or share substance use disorder program information in any legal case against you unless you give written consent, or a court orders Aetna with a subpoena or other legal requirement. The notice adds that you or Aetna must also receive notice and a chance to be heard.
Supporting quotations
We will not use or share this information in any legal case against you unless:
You give us written consent, or
A court orders us with a subpoena or other legal requirement.
You or Aetna must also receive notice and a chance to be heard.
Qualifications & exceptions
This limit applies to information that came from a substance use disorder program, and to use in a legal case "against you".
Not stated here
The notice does not say whether the notice-and-hearing requirement applies to both exceptions, or what "You or Aetna" means for who must be notified.
Cross-references
qualifies (model-proposed): Workers' compensation, law enforcement, legal proceedings and legal requirements — qualifies: The general legal-proceedings disclosure is narrowed for substance use disorder program information, which is not used in a legal case against you without your written consent or a court order, plus notice and a chance to be heard.
Legal Rights & Agreement Rules · User right or choice
Right to know why a policy was denied; limits on past denials and genetic information
You have the right to know the reasons for denying an insurance policy or another unfavorable underwriting decision. The notice says that if you have been denied a policy in the past, Aetna cannot use that information in its decision process and must review the facts on its own. Aetna also says it cannot use your genetic information to decide whether to issue you a policy or for other underwriting purposes.
Supporting quotations
Know the reasons for denying an insurance policy or other unfavorable underwriting decision.
If you’ve been denied a policy in the past, we can’t use that information in our decision process. We must review the facts on our own.
Also, we can’t use your genetic information to decide if we should issue you a policy or for other underwriting purposes.
Qualifications & exceptions
The notice's operations list includes "Underwriting and rating"; this right limits that use for past denials and genetic information.
Not stated here
The notice does not say how you ask for the reasons or what form they take.
Cross-references
qualifies (model-proposed): Other operations: underwriting, fraud, sale or merger, administration — qualifies: The operations list includes underwriting and rating; the rights section says Aetna cannot use your genetic information to decide whether to issue a policy or for other underwriting purposes.
Legal Rights & Agreement Rules · Restriction or exception
Insurers are not allowed to take part in pretext interviews, with exceptions
The notice says insurers are not allowed to take part in pretext interviews, except in some cases, such as suspected fraud or criminal activity. It then says "We don't take part in these."
Supporting quotations
Insurers aren’t allowed to take part in pretext interviews, except in some cases, such as suspected fraud or criminal activity. We don’t take part in these.
Qualifications & exceptions
The prohibition is stated for insurers generally, with exceptions such as suspected fraud or criminal activity.
Not stated here
"These" in the last sentence could mean pretext interviews generally or only the excepted cases, so the notice is unclear on whether Aetna takes part when an exception applies. The notice does not define "pretext interview".
Legal Rights & Agreement Rules · User right or choice
Right to file a complaint, with Aetna or the federal government
You have the right to file a complaint if you think someone has violated your privacy rights. You can do so by emailing the Aetna Privacy Office at PrivacyAetna@aetna.com or sending a letter to the Aetna HIPAA Member Rights Team, P.O. Box 14079, Lexington, KY 40512-4079; the notice also lists a fax number, 859-280-1272. You also may write to the Secretary of the U.S. Department of Health and Human Services. The notice says there are no penalties for filing a complaint.
Supporting quotations
You also have the right to file a complaint if you think someone has violated your privacy rights. To do so, just send an email to Aetna Privacy Office at PrivacyAetna@aetna.com or send a letter to:
Aetna HIPAA Member Rights Team P.O. Box 14079
Lexington, KY 40512-4079
Fax: 859-280-1272
You also may write to the Secretary of the U.S. Department of Health and Human Services.
There are no penalties for filing a complaint.
Qualifications & exceptions
The complaint right is stated for a belief that "someone" violated your privacy rights.
Not stated here
The fax number appears under the "send a letter to" address block without saying whether complaints may be faxed.
The notice gives no address for the Secretary of Health and Human Services.
Legal Rights & Agreement Rules · Company commitment
Aetna must keep PHI private and follow this notice
The notice says federal privacy law requires Aetna to keep your PHI private, to tell you about its legal duties and privacy practices, and to follow the terms of the notice in effect.
Supporting quotations
How we comply with the law
Federal privacy law requires us to keep your PHI private. And we must tell you about our legal duties and privacy practices. We must also follow the terms of the Notice in effect.
Qualifications & exceptions
The duty to follow the notice applies to "the Notice in effect", which Aetna may change.
Legal Rights & Agreement Rules · Permission or license
Aetna can change the notice at any time, and changes reach information it already holds
Aetna may change the terms of the notice and its privacy policies at any time. If it does, the new terms and policies will be effective for all the information it now has about you and apply to any information it may get or hold in the future.
Supporting quotations
When this Notice may change
We may change the terms of this Notice and our privacy policies anytime. If we do, the new terms and policies will be effective for all the information we now have about you. And they’ll apply to any information that we may get or hold in the future.
Qualifications & exceptions
The change applies to information Aetna already holds as well as future information.
Not stated here
The notice sets no advance-notice period and no way to object before a change takes effect.
Cross-references
qualifies (model-proposed): Aetna must keep PHI private and follow this notice — qualifies: Aetna must follow the terms of the notice in effect, and the notice says Aetna may change its terms at any time, with new terms applying to information it already holds.
Legal Rights & Agreement Rules · Company commitment
If Aetna makes material changes: revise, post, send, and you can ask for a copy
The notice says that if Aetna makes material or important changes to its privacy policies it will promptly revise the notice. It will also post the revised notice on its website, and if you are enrolled in an Aetna insurance plan at that time it will send you a new notice, as required. You can ask for a copy of the revised notice from the Aetna Privacy Office at the email address given earlier in the notice.
Supporting quotations
If we make material or important changes to our privacy policies, we will promptly revise our Notice.
We will also post the revised Notice on our website, and if you are enrolled in an Aetna insurance plan at that time we will send you a new notice, as required.
You can ask for a copy of the revised Notice, just ask the Aetna Privacy Office at the email above.
Qualifications & exceptions
The duty to revise is triggered by "material or important changes", while the notice also says Aetna may change terms at any time.
Mailing a new notice is limited to people enrolled in an Aetna insurance plan at that time and to when sending is "required".
Not stated here
"Promptly" is not defined, and the notice does not say when sending a new notice is "required".
Legal Rights & Agreement Rules · Context
Aetna is a brand name used by a group of companies
The notice says Aetna is the brand name used for products and services provided by one or more of the Aetna group of companies, including Aetna Life Insurance Company and its affiliates.
Supporting quotations
Aetna is the brand name used for products and services provided by one or more of the Aetna group of companies, including Aetna Life Insurance Company and its affiliates (Aetna).
Qualifications & exceptions
The notice earlier defines "Aetna" for its own purposes as the HMO and licensed insurer subsidiaries of Aetna Inc.; this closing line describes the brand name more broadly.
Not stated here
The notice does not say which company in the group provides a particular plan or product, and does not mention CVS Health.