Aetna Senior Supplemental Health plans notice of privacy practices

Aetna / CVS Health · agreement dated October 1, 2025 · Official agreement

Read the agreement

15 of 51 cards in Legal Rights & Agreement Rules

Legal Rights & Agreement Rules · Company commitment

Asks for written authorization for other uses, such as unrelated marketing, psychotherapy notes and sales

In all situations other than those the notice describes, Aetna says it will ask for your written authorization before using or disclosing your personal information. Its examples are marketing purposes unrelated to your benefit plan, before disclosing any psychotherapy notes, the sale of your health information, and other reasons required by law.

Supporting quotations

Uses and Disclosures Requiring Your Written Authorization
In all situations other than those described above, we will ask for your written authorization before using or disclosing personal information about you. For example, we will get your authorization:
for marketing purposes that are unrelated to your benefit plan(s),
before disclosing any psychotherapy notes,
related to the sale of your health information, and
for other reasons as required by law.

Qualifications & exceptions

  • The list is introduced by "for example," so it is illustrative.
  • Marketing is listed only when unrelated to your benefit plan(s).

Legal Rights & Agreement Rules · User right or choice

You can revoke an authorization in writing unless Aetna already acted on it

If you have given an authorization, you may revoke it in writing at any time, if Aetna has not already acted on it. Questions about authorizations can go to the toll-free Privacy Compliance Department number, 1-800-264-4000.

Supporting quotations

If you have given us an authorization, you may revoke it in writing at any time, if we have not already acted on it. If you have questions regarding authorizations, please call the toll-free Privacy Compliance Department number at 1-800-264-4000.

Qualifications & exceptions

  • Revocation must be in writing and does not undo something Aetna has already acted on.

Cross-references

Legal Rights & Agreement Rules · Restriction or exception

Special state or federal protections may apply to certain sensitive information

The notice says some state and federal laws may require special privacy protections, including certain requirements to obtain attestations from requestors, that limit the use and disclosure of certain sensitive health information. It lists categories such laws may protect: alcohol or substance use disorder, biometric information, child or adult abuse or neglect including sexual assault, communicable diseases, genetic information, HIV/AIDS, mental health, minors, reproductive health, and sexually transmitted diseases.

Supporting quotations

Additional Restrictions on Use and Disclosure
Some state and federal laws may require special privacy protections, including certain requirements to obtain attestations from requestors, that limit the use and disclosure of certain sensitive health information. Such laws may protect information related to:
Alcohol or substance use disorder
Biometric Information
Child or adult abuse or neglect, including sexual assault
Communicable diseases
Genetic information
HIV/AIDs
Mental health
Minors
Reproductive health
Sexually transmitted diseases

Qualifications & exceptions

  • Stated as "may"; whether a law applies depends on the law and the situation.

Not stated here

  • The notice does not name the specific laws or describe the protections.

Legal Rights & Agreement Rules · Company commitment

Aetna follows the stricter law where it applies; contact the Privacy Office for details

Aetna says it will follow the law that is stricter, meaning more protective of your PHI, where it applies to it. For more information about extra use or disclosure restrictions that may apply to your sensitive PHI, you can contact the Aetna Privacy Office.

Supporting quotations

We will follow the law that is stricter (or more protective of your PHI), where it applies to us. If you would like additional information about additional use or disclosure restrictions that may apply to your sensitive PHI, please contact the Aetna Privacy Office.

Qualifications & exceptions

  • Applies "where it applies to us."

Not stated here

  • The notice gives no contact details in this passage for the Privacy Office; an email address appears elsewhere in the notice.

Cross-references

Legal Rights & Agreement Rules · Context

Federal privacy rules give members several rights over their health information

The notice's rights section begins by saying the federal privacy regulations give you several rights regarding your health information.

Supporting quotations

Your Legal Rights
The federal privacy regulations give you several rights regarding your health information

Qualifications & exceptions

  • Introduces the rights listed in the cards that follow.

Legal Rights & Agreement Rules · User right or choice

You can file a privacy complaint with Aetna or the federal health department without penalty

You have the right to file a complaint if you think your privacy rights have been violated. You can email the Aetna Privacy Office at PrivacyAetna@aetna.com or write to the HIPAA Member Rights Team at the P.O. Box listed. You may also write to the Secretary of the U.S. Department of Health and Human Services. The notice says you will not be penalized for filing a complaint.

Supporting quotations

You also have the right to file a complaint if you think your privacy rights have been violated. To do so, please send an email to Aetna Privacy Office at PrivacyAetna@aetna.com or send your request to the following address:
HIPAA Member Rights Team P.O. Box 14079
Lexington, KY 40512-4079
You also may write to the Secretary of the U.S. Department of Health and Human Services. You will not be penalized for filing a complaint.

Qualifications & exceptions

  • Complaint routes are email, mail, or a written complaint to the federal health department Secretary.

Legal Rights & Agreement Rules · Permission or license

Aetna may change the notice and its policies at any time, applying to information it already holds

Aetna says it may change the terms of this notice and its privacy policies at any time. If it does, the new terms and policies will be effective for all of the information it already has about you, as well as any information it may receive or hold in the future.

Supporting quotations

This Notice is Subject to Change
We may change the terms of this notice and our privacy policies at any time. If we do, the new terms and policies will be effective for all of the information that we already have about you, as well as any information that we may receive or hold in the future.

Qualifications & exceptions

  • New terms apply retroactively to information already held, as well as future information.

Not stated here

  • The notice does not say how members will be told of a change.

Cross-references

Legal Rights & Agreement Rules · Context

Coverage may be underwritten or administered by several Aetna insurers; mail order pharmacy by Aetna Rx Home Delivery

The notice lists the companies that may underwrite or administer coverage, including Aetna Health Inc., Aetna Life Insurance Company, American Continental Insurance Company and Continental Life Insurance Company of Brentwood, Tennessee among others. It adds that mail order pharmacy services may be provided by Aetna Rx Home Delivery, LLC.

Supporting quotations

Coverage may be underwritten or administered by one or more of the following companies: Aetna Health Inc.; Aetna Health of California Inc.; Aetna Dental of California Inc.; Aetna Dental Inc.; Aetna Life Insurance Company; Aetna Insurance Company of Connecticut; Aetna Health Insurance Company of New York; American Continental Insurance Company; Continental Life Insurance Company of Brentwood, Tennessee and Corporate Health Insurance Company; Aetna Health and Life Insurance Company, Aetna Health Insurance Company, Coventry Health and Life Insurance Company, First Health Life and Health Insurance Company. Mail order pharmacy services may be provided by Aetna Rx Home Delivery, LLC.

Qualifications & exceptions

  • Coverage may be underwritten or administered by "one or more" of the listed companies.

Not stated here

  • The notice does not say which listed company applies to a particular member's plan.

Legal Rights & Agreement Rules · Context

Covers Aetna's insured plans, not employer self-funded plans

This notice applies to Aetna's insured health benefit plans. It does not apply to plans that an employer self-funds. For a group health insurance plan, the employer can say whether the plan is insured or self-funded, and a member in a self-funded plan may want to ask the employer for its own privacy notice. The notice describes how medical information about you may be used and disclosed and how you can get access to it.

Supporting quotations

This Notice of Privacy Practices applies to Aetna’s insured health benefit plans. It does not apply to any plans that are self-funded by an employer.
If your plan is self-funded, you may want to ask for a copy of your employer’s privacy notice.
This notice describes how medical information about you may be used and disclosed and how you can get access to this information.

Qualifications & exceptions

  • Applies to insured plans only; plans self-funded by an employer are excluded.
  • The employer, not this notice, tells a group member whether the plan is insured or self-funded.

Not stated here

  • The notice does not say which individual plans are insured or self-funded.

Legal Rights & Agreement Rules · Procedure

Spanish version available by calling Member Services

The notice says, in Spanish, that to receive it in Spanish a member should call the toll-free Member Services number shown on their ID card.

Supporting quotations

Para recibir esta notificación en español por favor llamar al número gratuito de Member Services (Servicios a Miembros) que figura en su tarjeta de identificación.

Qualifications & exceptions

  • The number is on the member ID card, not in this document.

Not stated here

  • The Member Services phone number is not given in the notice.

Legal Rights & Agreement Rules · Company commitment

Treats personal information as confidential under law and company policy

Aetna says it considers personal information confidential and protects its privacy in accordance with federal and state privacy laws and its own company privacy policies. The notice describes how Aetna may use and disclose information in administering your benefits and explains your legal rights about that information.

Supporting quotations

Aetna1 considers personal information confidential. We protect the privacy of that information in accordance with federal and state privacy laws, as well as our own company privacy policies.
This notice describes how we may use and disclose information about you in administering your benefits, and it explains your legal rights regarding the information.

Qualifications & exceptions

  • Stated as a general commitment; the specific uses and disclosures are in the sections that follow.

Not stated here

  • The company privacy policies it refers to are not part of this document.

Legal Rights & Agreement Rules · Context

Defines "personal information" and "health information"

In this notice, "personal information" means information that identifies you, such as your name and Social Security Number, plus financial, health and other nonpublic information Aetna obtains so it can provide you with insurance coverage. "Health information" means information that identifies you and relates to your medical history, meaning the health care you receive or the amounts paid for it.

Supporting quotations

we mean information that identifies you as an individual, such as your name and Social Security Number, as well as financial, health and other information about you that is nonpublic, and that we obtain so we can provide you with insurance coverage
we mean information that identifies you and relates to your medical history (i.e., the health care you receive or the amounts paid for that care)

Qualifications & exceptions

  • The personal-information definition is limited to nonpublic information obtained to provide insurance coverage.

Cross-references

Legal Rights & Agreement Rules · Context

Notice became effective October 1, 2025

The notice says it became effective on October 1, 2025. The page header and footer carry the form identifier "GR-68737 (2-26) ACIC"; the notice does not explain how that identifier relates to the stated effective date.

Supporting quotations

This notice became effective on October 1, 2025.
GR-68737 (2-26) ACIC

Qualifications & exceptions

  • The stated effective date is the October 1, 2025 date in the text.

Not stated here

  • The meaning of "(2-26)" in the form identifier is not explained.