Security & Safeguards · Company practice
PHI access limited to authorized staff with safeguards
Cigna Healthcare says it restricts access to your PHI to authorized workforce members who need it for your treatment, for payment purposes and/or for health care operations. It also says only authorized and trained workforce members can reach paper and electronic records and the non-public areas where they are stored, and that it maintains technical, physical and administrative safeguards.
Supporting quotations
We restrict access to your PHI to authorized workforce members who need that information for your treatment, for payment purposes and/or for health care operations. We maintain technical, physical and administrative safeguards to ensure the privacy of your PHI.
only authorized and trained workforce members are given access to our paper and electronic records and to non-public areas where this information is stored
Qualifications & exceptions
- Access is tied to a need related to treatment, payment and/or health care operations.
Not stated here
- The safeguards are described only by type (technical, physical, administrative); no specific controls, audits or certifications are named.
Security & Safeguards · Company practice
Workforce privacy training and Privacy Office monitoring
Cigna Healthcare says workforce members are trained on topics including privacy and data protection policies and procedures (how paper and electronic records are labeled, stored, filed and accessed) and on the technical, physical and administrative safeguards that protect PHI. It says its corporate Privacy Office monitors how the organization follows those policies and procedures and educates the organization on the topic.
Supporting quotations
Workforce members are trained on topics including:
Privacy and data protection policies and procedures including how paper and electronic records are labeled, stored, filed and accessed.
Technical, physical and administrative safeguards in place to maintain the privacy and security of your PHI
Our corporate Privacy Office monitors how we follow the policies and procedures, and educates our organization on this important topic.
Qualifications & exceptions
- The training list is introduced with 'including', so the topics given are examples rather than a complete list.
Not stated here
- No training frequency, testing or enforcement consequence is stated.