Legal Rights & Agreement Rules · Restriction or exception
Notice covers insured plans, not employer self-funded plans
This notice covers Aetna’s insured health benefit plans. It does not cover plans that an employer funds itself (self-funded plans). The notice says your employer can tell you whether your plan is insured or self-funded, and suggests that if yours is self-funded you may want to ask for a copy of your employer’s own privacy notice.
Supporting quotations
This Notice of Privacy Practices applies to Aetna’s insured health benefit plans. It does not apply to any plans that are self-funded by an employer.
Your employer will be able to tell you if your plan is insured or self-funded.
If you plan is self-funded, you may want to ask for a copy of your employer’s privacy notice.
Qualifications & exceptions
Applies only to insured plans
Self-funded employer plans are excluded
Not stated here
The text never uses the word “voluntary” or lists which products count as Aetna’s insured health benefit plans, so the scope is only as stated here
The employer’s own privacy notice for a self-funded plan is not supplied
Legal Rights & Agreement Rules · Context
Notice effective October 1, 2025
The notice states that it became effective on October 1, 2025.
Supporting quotations
This notice became effective on October 1, 2025.
Qualifications & exceptions
Effective date as stated in the notice
Not stated here
The page footers carry a form code, “GR-68113 (2-26)”, which the text does not explain; the notice does not say whether it relates to a later printing than the stated effective date
Legal Rights & Agreement Rules · Company commitment
Aetna treats personal information as confidential
Aetna says it considers personal information confidential and protects its privacy in line with federal and state privacy laws and its own company privacy policies. The notice explains how Aetna may use and disclose information in administering your benefits and your legal rights over that information. Near the end it adds that the federal privacy regulations require Aetna to keep your personal information private, to give you notice of its legal duties and privacy practices, and to follow the terms of the notice currently in effect.
Supporting quotations
Aetna1 considers personal information confidential. We protect the privacy of that information in accordance with federal and state privacy laws, as well as our own company privacy policies.
This notice describes how we may use and disclose information about you in administering your benefits, and it explains your legal rights regarding the information.
Aetna’s Legal Obligations
The federal privacy regulations require us to keep personal information about you private, to give you notice of our legal duties and privacy practices, and to follow the terms of the notice currently in effect.
Qualifications & exceptions
Protection is described as being in accordance with federal and state privacy laws and Aetna’s own policies
Duty to follow the notice currently in effect
Not stated here
The notice does not name the specific federal or state laws or the company policies
Legal Rights & Agreement Rules · Company practice
Disclosures Aetna must make
Aetna says it must use and disclose your personal information to you or to someone with the legal right to act for you (your personal representative) in order to administer your rights under this notice, and to the Secretary of the Department of Health and Human Services as necessary for HIPAA compliance and enforcement.
Supporting quotations
Required Disclosures: We must use and disclose your personal information in the following manner:
To you or someone who has the legal right to act for you (your personal representative) in order to administer your rights as described in this notice; and
To the Secretary of the Department of Health and Human Services, as necessary, for HIPAA compliance and enforcement purposes.
Qualifications & exceptions
Stated as “must”, unlike the “may” permissions elsewhere
Disclosure to the HHS Secretary is limited to what is necessary for HIPAA compliance and enforcement
Legal Rights & Agreement Rules · Company commitment
Written authorization needed for other uses and disclosures
Aetna says that in all situations other than those described above it will ask for your written authorization before using or disclosing personal information about you. Examples where it will get your authorization: marketing unrelated to your benefit plan(s), before disclosing any psychotherapy notes, in connection with the sale of your health information, and for other reasons required by law.
Supporting quotations
In all situations other than those described above, we will ask for your written authorization before using or disclosing personal information about you. For example, we will get your authorization:
for marketing purposes that are unrelated to your benefit plan(s),
before disclosing any psychotherapy notes,
related to the sale of your health information, and
for other reasons as required by law.
Qualifications & exceptions
Authorization requirement applies outside the situations described earlier in the notice
The four items are introduced as examples
Not stated here
Marketing that is related to your benefit plan(s) is not addressed in this passage
Legal Rights & Agreement Rules · Restriction or exception
Categories of sensitive information that laws may protect
The notice says some state and federal laws may require special privacy protections, including certain requirements to obtain attestations from requestors, that limit the use and disclosure of certain sensitive health information. It lists information related to alcohol or substance use disorder, biometric information, child or adult abuse or neglect including sexual assault, communicable diseases, genetic information, HIV/AIDS, mental health, minors, reproductive health, and sexually transmitted diseases.
Supporting quotations
Some state and federal laws may require special privacy protections, including certain requirements to obtain attestations from requestors, that limit the use and disclosure of certain sensitive health information. Such laws may protect information related to:
Alcohol or substance use disorder
Biometric Information
Child or adult abuse or neglect, including sexual assault
Communicable diseases
Genetic information
HIV/AIDs
Mental health
Minors
Reproductive health
Sexually transmitted diseases
Qualifications & exceptions
Stated as “may”: some laws may require protections
Protections vary by law and by type of information
Not stated here
The laws themselves are not named or supplied, and the notice does not say which protections apply to which category
Legal Rights & Agreement Rules · Restriction or exception
Stricter law is followed where it applies
For sensitive information, Aetna says it will follow the law that is stricter (more protective of your PHI) where it applies to Aetna, and invites you to contact the Aetna Privacy Office for more information about additional restrictions. This qualifies the notice’s general permissions to use and disclose information for treatment, payment, health care operations and the other purposes listed, which are introduced as things Aetna “may” do.
Supporting quotations
We will follow the law that is stricter (or more protective of your PHI), where it applies to us.
If you would like additional information about additional use or disclosure restrictions that may apply to your sensitive PHI, please contact the Aetna Privacy Office.
How Aetna Uses and Discloses Personal Information
In administering your health benefits, we may use and disclose personal information about you in various ways, including:
Health Care Operations: We may use and disclose personal information during the course of running our health business
Payment: To help pay for your covered services, we may use and disclose personal information in a number of ways
Treatment: We may disclose information to doctors, dentists, pharmacies, hospitals, and other health care providers who take care of you.
Qualifications & exceptions
Applies “where it applies to us”
Concerns sensitive PHI
Contact is the Aetna Privacy Office
Not stated here
Which stricter laws apply, and how they change any particular use or disclosure, is not described
Cross-references
qualifies (model-proposed): Use and disclosure for health care operations — qualifies: Where a stricter or more protective law applies, Aetna follows it, so the general “may use and disclose” permission for health care operations is subject to that qualification.
qualifies (model-proposed): Use and disclosure for payment — qualifies: Same qualification applies to the payment permission for sensitive information.
qualifies (model-proposed): Disclosure to health care providers for treatment — qualifies: Same qualification applies to disclosures to providers for treatment where a stricter law covers the information.
Legal Rights & Agreement Rules · Restriction or exception
Substance use disorder information not used in legal cases against you without consent or court order
Aetna says it will not use or share information that comes from a substance use disorder program in any legal case against you unless you give written consent, or a court orders Aetna with a subpoena or other legal requirement. The notice adds that you or Aetna must also receive notice and a chance to be heard.
Supporting quotations
We will not use or share this information in any legal case against you unless:
You give us written consent, or
A court orders us with a subpoena or other legal requirement.
You or Aetna must also receive notice and a chance to be heard.
Qualifications & exceptions
Two routes: your written consent, or a court order with a subpoena or other legal requirement
Notice and a chance to be heard are also required
Not stated here
The notice does not spell out who must be heard in each route, since it says “you or Aetna”
Legal Rights & Agreement Rules · User right or choice
Right not to be subjected to pretext interviews
You have the right, with very limited exceptions, not to be subjected to pretext interviews. A footnote at the end of the notice says that Aetna does not participate in pretext interviews.
Supporting quotations
You have the right with very limited exceptions, not to be subjected to pretext interviews.
Qualifications & exceptions
“Very limited exceptions” apply
Not stated here
The exceptions are not described and the notice does not define “pretext interview”
Legal Rights & Agreement Rules · User right or choice
Right to file a complaint, with no penalty
You have the right to file a complaint if you think your privacy rights have been violated, by email to the Aetna Privacy Office at PrivacyAetna@aetna.com or by mail to the HIPAA Member Rights Team at P.O. Box 14079, Lexington, KY 40512-4079. You may also write to the Secretary of the U.S. Department of Health and Human Services. You will not be penalized for filing a complaint.
Supporting quotations
You also have the right to file a complaint if you think your privacy rights have been violated. To do so, please send an email to Aetna Privacy Office at PrivacyAetna@aetna.com or send your request to the following address:
HIPAA Member Rights Team P.O. Box 14079 Lexington, KY 40512-4079
You also may write to the Secretary of the U.S. Department of Health and Human Services. You will not be penalized for filing a complaint.
Qualifications & exceptions
Condition: you think your privacy rights have been violated
No penalty for filing a complaint
Legal Rights & Agreement Rules · Company commitment
Aetna’s legal obligations under the federal privacy regulations
Aetna states that the federal privacy regulations require it to keep personal information about you private, to give you notice of its legal duties and privacy practices, and to follow the terms of the notice currently in effect.
Supporting quotations
Aetna’s Legal Obligations
The federal privacy regulations require us to keep personal information about you private, to give you notice of our legal duties and privacy practices, and to follow the terms of the notice currently in effect.
Qualifications & exceptions
Three duties: keep information private, give notice of duties and practices, follow the notice currently in effect
Not stated here
The regulations are referred to generally and are not named or supplied
Legal Rights & Agreement Rules · Permission or license
Aetna may change the notice at any time, with effect on existing information
Aetna says it may change the terms of this notice and its privacy policies at any time. If it does, the new terms and policies apply to all the information it already has about you, as well as any information it receives or holds in the future.
Supporting quotations
This Notice is Subject to Change
We may change the terms of this notice and our privacy policies at any time. If we do, the new terms and policies will be effective for all of the information that we already have about you, as well as any information that we may receive or hold in the future.
Qualifications & exceptions
Changes may be made “at any time”
New terms apply to information already held as well as future information
Not stated here
This passage does not say how or when you will be told of a change
Legal Rights & Agreement Rules · Company commitment
Aetna does not participate in pretext interviews
A footnote states that Aetna does not participate in pretext interviews. This is the footnote attached to the right in the rights section not to be subjected to pretext interviews.
Supporting quotations
We do not participate in pretext interviews.
Qualifications & exceptions
Stated as a flat statement of practice
Not stated here
The notice does not define “pretext interview”
Cross-references
related (model-proposed): Right not to be subjected to pretext interviews — references: The footnote attached to the pretext right states that Aetna does not participate in pretext interviews.
Legal Rights & Agreement Rules · Context
Companies that may underwrite or administer coverage
The notice says coverage may be underwritten or administered by one or more of Aetna Health Inc.; Aetna Health of California Inc.; Aetna Dental of California Inc.; Aetna Dental Inc.; Aetna Life Insurance Company; Aetna Insurance Company of Connecticut; Aetna Health Insurance Company of New York; and Corporate Health Insurance Company. Mail order pharmacy services may be provided by Aetna Rx Home Delivery, LLC.
Supporting quotations
Coverage may be underwritten or administered by one or more of the following companies: Aetna Health Inc.; Aetna Health of California Inc.; Aetna Dental of California Inc.; Aetna Dental Inc.; Aetna Life Insurance Company; Aetna Insurance Company of Connecticut; Aetna Health Insurance Company of New York; and Corporate Health Insurance Company. Mail order pharmacy services may be provided by Aetna Rx Home Delivery, LLC.
Qualifications & exceptions
“May” and “one or more”: which company applies to your coverage is not decided by this list
Not stated here
The notice does not say which company covers which plan, whether these companies are all in the affiliated covered entity described at the start, or whether the mail order pharmacy company is