What the notice covers: records containing your PHI
The notice says it describes how medical information about you may be used and disclosed and how you can get access to it. Cigna Healthcare says it creates records about you and the treatment and services it provides, and calls the information it collects Protected Health Information (PHI). The notice says it applies to all electronic or paper records that Cigna Healthcare creates, obtains or maintains that contain your PHI, and that Cigna Healthcare is bound by the notice's terms when it uses or gives out your PHI. That commitment is qualified by a later section that lets Cigna Healthcare change the notice at any time.
Supporting quotations
This notice describes how medical information about you may be used and disclosed, and how you can get access to this information.
Cigna HealthcareSM creates records about you and the treatment and services we provide to you. The information we collect is called Protected Health Information (PHI).
When we use or give out (disclose) your PHI, we are bound by the terms of this Notice. This Notice applies to all electronic or paper records we create, obtain, and/or maintain that contain your PHI.
We may change the terms of this Notice at any time
Qualifications & exceptions
Being bound by the notice is subject to Cigna Healthcare's later stated right to change the notice's terms at any time, including making new terms effective for PHI it already holds.
Not stated here
The opening section does not say which plans or members the notice covers; the Global Health Benefits plan is named only in the section on changes to the notice.
'We' is Cigna Healthcare, described near the end of the document as The Cigna Group and/or its subsidiaries and affiliates; this section does not say which entity holds a given member's records.
Legal Rights & Agreement Rules · Company commitment
Legal duty to protect PHI, give notice and notify of breach
Cigna Healthcare says it is required by federal and state law to protect the privacy of your PHI, to give you this notice about how it safeguards and uses PHI, and to notify you following a breach of your unsecured PHI. This describes a legal duty the notice states; it does not say how or how quickly a breach notice would be given.
Supporting quotations
We are required by federal and state law to protect the privacy of your PHI and to provide you with this Notice about how we safeguard and use it and to notify you following a breach of your unsecured PHI.
Qualifications & exceptions
The breach-notification duty is stated for 'unsecured' PHI.
Not stated here
The notice does not say how, how quickly or by what channel a breach notice would be given, or which laws apply to a particular member.
Legal Rights & Agreement Rules · User right or choice
Written authorization needed for uses not otherwise described
Cigna Healthcare says that, other than for the purposes described above or as permitted by applicable law, it must obtain your written authorization to use or disclose your PHI. It gives examples of when it would need authorization: to use your PHI to a prospective employer; to use your PHI for marketing communications and when it receives direct or indirect payment from a third party for making such communications; and for any sale involving your PHI, as required by law. The notice repeats that any other uses and disclosures not described in it will only be made with your prior written authorization. This is separate from the disclosure to your employer as plan sponsor, which the notice permits without authorization for administering your plan.
Supporting quotations
Uses of PHI that require your authorization
Other than for the purposes described above or as permitted by applicable law, we must obtain your written authorization to use or disclose your PHI.
For example, we would need your authorization:
To use your PHI to a prospective employer.
Use your PHI for marketing communications and when we receive direct or indirect payment from a third party for making such communications.
For any sale involving your PHI, as required by law.
Any other uses and disclosures not described in this Notice will only be made with your prior written authorization.
Disclosures to your employer as sponsor of your health plan.
Qualifications & exceptions
The rule excepts the described purposes and what applicable law permits.
The examples are introduced with 'for example' and are not a complete list.
The sale example is stated 'as required by law'.
Not stated here
Item b64 is worded as 'To use your PHI to a prospective employer' and the marketing item joins two phrases with 'and'; the notice does not clarify the exact scope of either.
The notice does not describe how an authorization is requested, its form or its expiry.
Legal Rights & Agreement Rules · Restriction or exception
Limits on substance use disorder records and genetic information
Cigna Healthcare says it will not share substance use disorder treatment records received from federally assisted substance use disorder treatment programs for civil, criminal, administrative or legislative proceedings against you unless you consent in writing or it receives a court order. It also says it is prohibited from using or disclosing PHI that is genetic information for underwriting purposes.
Supporting quotations
We will not share your substance use disorder treatment records received from federally assisted substance use disorder treatment programs for civil, criminal, administrative, or legislative proceedings against you unless you provide your consent in writing, or we receive a court order.
We are prohibited from using or disclosing PHI that is genetic information for underwriting purposes.
Qualifications & exceptions
The substance use disorder limit covers records received from federally assisted programs and proceedings against you; it lifts with your written consent or a court order.
Not stated here
The notice does not say how a court order is evaluated before records are released.
Cross-references
narrows (model-proposed): Some PHI disclosures need no written authorization — narrows: The limits on sharing substance use disorder treatment records in proceedings against you and on using genetic information for underwriting limit what the general permissions allow.
Legal Rights & Agreement Rules · User right or choice
You can cancel a written authorization for future use
Cigna Healthcare says you may cancel (revoke) a written authorization you gave before. The cancellation must be submitted to Cigna Healthcare in writing, and it applies to future uses and disclosures of your PHI. It does not affect disclosures made previously while your authorization was in effect.
Supporting quotations
Cancellation.
You may cancel – or revoke – a written authorization you gave us before. The cancellation, submitted to us in writing, will apply to future uses and disclosures of your
PHI. It will not impact disclosures made previously, while your authorization was in effect.
Qualifications & exceptions
Cancellation must be in writing and is prospective only.
Not stated here
The notice does not say where to send the written cancellation in this section or how long it takes to take effect.
Cross-references
qualifies (model-proposed): Written authorization needed for uses not otherwise described — qualifies: A written authorization can be cancelled for future uses and disclosures, which limits how long an authorization-based use or disclosure can continue.
Legal Rights & Agreement Rules · User right or choice
Individual rights cover PHI Cigna Healthcare creates, obtains or maintains
The notice lists individual rights you have regarding the PHI that Cigna Healthcare creates, obtains and/or maintains about you. The rights are explained in the cards that follow: restrictions, confidential communications, inspection and copies, amendment, accounting of disclosures, a personal representative and a paper copy of the notice.
Supporting quotations
Your individual rights
You have the following rights regarding the PHI that Cigna Healthcare creates, obtains, and/or maintains about you.
Not stated here
The notice does not say how to exercise each right beyond the contact section, or whether rights differ by country or plan.
Legal Rights & Agreement Rules · User right or choice
Right to request restrictions on use and disclosure
You may ask Cigna Healthcare to restrict the way it uses and discloses your PHI for treatment, payment and health care operations. Cigna Healthcare is not required to agree, but says it will consider requests carefully, and if it does agree it will abide by the restriction.
Supporting quotations
Right to request restrictions.
You may ask us to restrict the way we use and disclose your PHI for treatment, payment and health care operations, as explained in this Notice.
We are not required to agree to the restrictions, but we will consider them carefully. If we do agree to the restrictions, we will abide by them.
Uses of PHI without your authorization
Qualifications & exceptions
Cigna Healthcare may decline; it is bound only if it agrees.
The right is worded for treatment, payment and health care operations.
Not stated here
The right is not worded for the other disclosures the notice lists without authorization (for example public health or law enforcement); the notice does not say whether restrictions can be requested for those.
Legal Rights & Agreement Rules · User right or choice
Right to receive confidential communications
You may ask to receive Cigna Healthcare communications containing PHI by alternative means or at alternative locations; the example is being contacted by phone at home rather than at work. Cigna Healthcare says it will accommodate reasonable requests whenever feasible.
Supporting quotations
Right to receive confidential communications. You may ask to receive Cigna Healthcare communications containing PHI by alternative means or at alternative locations.
We will accommodate reasonable requests whenever feasible.
Qualifications & exceptions
Requests must be reasonable and are accommodated 'whenever feasible'.
Not stated here
The notice does not say what makes a request unreasonable or infeasible.
Legal Rights & Agreement Rules · User right or choice
Right to inspect and copy your PHI
You may ask in advance to review or receive a copy of your PHI that is in certain paper or electronic records Cigna Healthcare maintains, such as prescription and billing records. In limited circumstances Cigna Healthcare may deny access to a portion of the records. You may also request that your PHI be disclosed or sent to a Health Information Exchange (HIE).
Supporting quotations
Right to inspect and copy your PHI. You may ask in advance to review or receive a copy of your PHI that is included in certain paper or electronic records we maintain such as prescription and billing records.
Under limited circumstances, we may deny you access to a portion of your records.
You may request that we disclose or send a copy of your PHI to a Health Information Exchange (HIE).
Qualifications & exceptions
Applies to PHI in 'certain' records; you ask in advance.
Access to a portion may be denied under limited circumstances.
Not stated here
The notice does not list the circumstances for denial, say which records are excluded, or state a response time or copy fee.
Legal Rights & Agreement Rules · User right or choice
Right to ask to amend your records
You may ask Cigna Healthcare to correct PHI in its electronic or paper records if you believe it is inaccurate. If Cigna Healthcare determines the PHI is inaccurate, it will correct it if permitted by law. If a health care facility or professional created the information you want changed, you should ask them to amend it.
Supporting quotations
Right to amend your records. You have the right to ask us to correct your PHI contained in our electronic or paper records if you believe it is inaccurate.
If we determine that the PHI is inaccurate, we will correct it if permitted by law.
If a health care facility or professional created the information that you want to change, you should ask them to amend the information.
Qualifications & exceptions
Correction happens only if Cigna Healthcare determines the PHI is inaccurate and the law permits.
Not stated here
The notice does not say what happens if Cigna Healthcare disagrees, or how long a decision takes.
Legal Rights & Agreement Rules · User right or choice
Right to an accounting of disclosures, with exclusions and a fee
On your request Cigna Healthcare will provide a list of the disclosures it has made of your PHI for a specified time period. The list excludes: disclosures you authorized; disclosures made earlier than six years before the request (for disclosures from an electronic health record this period may be limited to three years); disclosures for treatment, payment and health care operations except when required by law; and certain other disclosures excepted by law. If you request an accounting more than once in any 12-month period, Cigna Healthcare will charge a reasonable fee for each report after the first.
Supporting quotations
Right to receive an accounting of disclosures. Upon your request, we will provide a list of the disclosures we have made of your PHI for a specified time period. However, the list will exclude:
Disclosures you have authorized.
Disclosures made earlier than six years before the date of your request (in the case of disclosures made from an electronic health record, this period may be limited to three years before the date of your request).
Disclosures made for treatment, payment, and health care operations purposes except when required by law.
Certain other disclosures that are excepted by law.
If you request an accounting more than once during any 12-month period, we will charge you a reasonable fee for each accounting report after the first one.
Qualifications & exceptions
The list excludes four stated categories.
The fee applies to each accounting after the first within a 12-month period; the fee sentence appears under the last excluded item but is stated as applying to requests generally.
Not stated here
'Certain other disclosures excepted by law' are not specified.
The notice does not give the amount of the 'reasonable fee'.
Legal Rights & Agreement Rules · User right or choice
Right to name a personal representative
You may name another person to act as your Personal Representative. The representative will be allowed access to your PHI, to communicate with the health care professionals and facilities providing your care, and to exercise all other HIPAA rights on your behalf. Depending on the authority you grant, he or she may also have authority to make health care decisions for you.
Supporting quotations
Right to name a personal representative. You may name another person to act as your Personal Representative.
Your representative will be allowed access to your PHI, to communicate with the health care professionals and facilities providing your care, and to exercise all other HIPAA rights on your behalf.
Depending on the authority you grant your representative, he or she may also have authority to make health care decisions for you.
Qualifications & exceptions
Health care decision authority depends on the authority you grant.
Not stated here
The notice does not describe how to name a representative or what documentation is required.
Legal Rights & Agreement Rules · User right or choice
Right to a paper copy of this notice
Upon your request Cigna Healthcare will provide a paper copy of the notice, even if you have already received one, as described in the 'Notice Availability and Duration' section later in the notice.
Supporting quotations
Right to receive a paper copy of this Notice. Upon your request, we will provide a paper copy of this Notice, even if you have already received one, as described in the Notice Availability and Duration
section later in this Notice.
Not stated here
The referenced section describes where to obtain a copy; it is carded in packet 4.
Legal Rights & Agreement Rules · User right or choice
Right to complain to the U.S. HHS Office for Civil Rights without retaliation
If you believe Cigna Healthcare may have violated your privacy rights you may also file a written complaint with the Secretary of the U.S. Department of Health and Human Services (HHS), sent by email, fax or mail to the HHS Office for Civil Rights (OCR). Cigna Healthcare will give you contact information for the OCR Regional Manager for your area if you ask its Privacy Office. It says it will not take any action against you for exercising your right to file a complaint, with it or with the Secretary.
Supporting quotations
Contact a government agency.
If you believe we may have violated your privacy rights, you may also file a written complaint with the Secretary (“the Secretary”) of the U.S. Department of Health and Human Services (HHS).
We will provide you with the contact information for the OCR Regional Manager in your area if you request it from our Privacy Office.
We will not take any action against you if you exercise your right to file a complaint, either with us or with the Secretary.
Qualifications & exceptions
The complaint must be written.
The no-retaliation statement covers complaints to Cigna Healthcare or to the Secretary.
Not stated here
The notice names a U.S. agency and does not say how members outside the United States can complain to a local authority; the OCR web address is printed with stray spaces in the extracted text.
Legal Rights & Agreement Rules · Permission or license
Cigna Healthcare may change the notice and apply it to existing PHI
Cigna Healthcare says it may change the terms of the notice at any time and may, at its discretion, make the new terms effective for all of your PHI it holds, including PHI created or received before the new notice. If it changes the notice it will update the notice on its website and, if you are enrolled in a Cigna Healthcare Global Health Benefits plan at that time, will send you the new notice, as required. You can also get a copy of the new notice on request by calling the International Service Centers or from the website.
Supporting quotations
Right to change terms of this Notice.
We may change the terms of this Notice at any time, and we may, at our discretion, make the new terms effective for all of your PHI in our possession, including any PHI we created or received before we issued the new Notice.
If we change this Notice, we will update the Notice on our website and, if you are enrolled in a Cigna Healthcare, Global Health Benefits plan at that time, we will send you the new Notice, as required.
In addition, you can obtain a copy of the new Notice upon request when you call the International Service Centers or from our website.
Qualifications & exceptions
Mailing the new notice is stated for people enrolled in a Cigna Healthcare Global Health Benefits plan at the time, 'as required'.
Retroactive application to existing PHI is at Cigna Healthcare's discretion.
Not stated here
No advance notice period is stated before a change takes effect.
The notice does not say what happens for people who are not enrolled in a Global Health Benefits plan at the time of a change beyond the website update and request-a-copy option.
Notice dates: effective April 14, 2003, updated October 15, 2025
The notice says it is effective as of April 14, 2003 and updated as of October 15, 2025.
Supporting quotations
Effective date
This Notice is effective as of April 14, 2003, and updated as of October 15, 2025.
Not stated here
The notice does not say what changed in the October 15, 2025 update.
Legal Rights & Agreement Rules · Context
Which Cigna companies 'Cigna Healthcare' refers to
The notice says Cigna Healthcare products and services are provided exclusively by or through operating subsidiaries of The Cigna Group, including Cigna Health and Life Insurance Company, Cigna Life Insurance Company of Canada, Cigna Global Insurance Company Limited, Evernorth Care Solutions, Inc., and Evernorth Behavioral Health, Inc. It says 'Cigna Healthcare' refers to The Cigna Group and/or its subsidiaries and affiliates, and that the name, logo and other marks are owned by Cigna Intellectual Property, Inc. and licensed for use. A footer line on the form says it is offered by Cigna Health and Life Insurance Company or its affiliates. So 'we' in the notice can mean any of these related companies.
Supporting quotations
including Cigna Health and Life Insurance Company, Cigna Life Insurance Company of Canada, Cigna Global Insurance Company Limited, Evernorth Care Solutions, Inc., and Evernorth Behavioral Health, Inc.
refers to The Cigna Group and/or its subsidiaries and affiliates
Offered by Cigna Health and Life Insurance Company or its affiliates.
Qualifications & exceptions
'Cigna Healthcare' is a collective name that can refer to The Cigna Group and/or subsidiaries and affiliates.
Not stated here
The notice does not say which listed company holds or processes a particular member's PHI.