Aetna International U.S.-based plans notice of privacy practices

Aetna / CVS Health · agreement dated October 1, 2025 · Official agreement

Read the agreement

3 of 64 cards in Security & Safeguards

Security & Safeguards · Company commitment

Aetna treats personal information as confidential under applicable laws

Aetna says it considers personal information confidential and protects its privacy in accordance with applicable privacy laws and regulations and its own privacy policies. The notice says these laws may include, where applicable, the General Data Protection Regulation and the U.S. HIPAA Privacy Rules.

Supporting quotations

Aetna considers personal information to be confidential
We protect the privacy of that information in accordance with applicable privacy laws and regulations, as well as our own privacy policies.
These laws and regulations may include where applicable, the General Data Protection Regulation and the U.S. Health Insurance Portability and Accountability Act Privacy Rules (HIPAA Privacy Rules).

Qualifications & exceptions

  • The laws are described as ones that "may include where applicable" the GDPR and the HIPAA Privacy Rules; the notice does not say which law applies to which member.

Not stated here

  • The notice refers to Aetna's "own privacy policies" without supplying them here.

Security & Safeguards · User right or choice

Right to be notified of a breach involving your health information

The notice lists the right to be notified following a breach involving your health personal information.

Supporting quotations

Be notified following a breach involving your health personal information.

Not stated here

  • The notice does not say how or how quickly you will be notified.

Security & Safeguards · Company practice

Administrative, technical and physical safeguards

Aetna says it guards your information with administrative, technical and physical safeguards to protect it against unauthorized access and against threats and hazards to its security and integrity.

Supporting quotations

We guard your Information with administrative, technical, and physical safeguards to protect it against unauthorized access and against threats and hazards to its security and integrity.

Not stated here

  • The notice does not describe the specific safeguards.