Security & Safeguards · Company commitment
Anthem will confirm before sending PHI by unencrypted email
Anthem warns that PHI sent unencrypted, meaning regular email, could be read by a third party. It says it will first confirm that the member wants to get PHI by unencrypted email before sending it.
Supporting quotations
Remember, there’s a risk your PHI could be read by a third party when it’s sent unencrypted, meaning regular email. So we will first confirm that you want to get your PHI by unencrypted email before sending it to you.
Qualifications & exceptions
- Applies when a copy of PHI is requested through email.
Cross-references
Security & Safeguards · Company commitment
Anthem says it protects PHI with policies and practices and must tell members of a breach it believes occurred
Anthem says it is dedicated to protecting PHI and has set up policies and information practices to keep it secure and private. If it believes a member's PHI has been breached, it must let the member know.
Supporting quotations
How we protect information
We’re dedicated to protecting your PHI, and we’ve set up a number of policies and information practices to help keep your PHI secure and private.
If we believe your PHI has been breached, we must let you know.
Qualifications & exceptions
- The breach notice depends on Anthem's own belief that PHI has been breached.
Not stated here
- The notice does not say how or when a breach notice will be sent.
Security & Safeguards · Company practice
Safeguards: physical and electronic protections, limited employee access and business partner duties
Anthem says it keeps oral, written and electronic PHI safe with physical and electronic means that follow federal and state laws, including secured offices, password-protected computers, and locked storage. Employees must protect PHI under written policies that limit access to those who need the data, and wear ID badges. Where required by law, business partners must protect the privacy of shared data and may not give PHI to others without written permission unless the law allows it and the notice states it.
Supporting quotations
We keep your oral, written, and electronic PHI safe using the right procedures, and through physical and electronic means.
Some of the ways we keep your PHI safe include securing offices that hold PHI, password-protecting computers, and locking storage areas and filing cabinets.
These policies limit access to PHI to only those employees who need the data to do their jobs.
Also, where required by law, our business partners must protect the privacy of data we share with them as they work with us.
They’re not allowed to give your PHI to others without your written permission, unless the law allows it and it’s stated in this notice.
Qualifications & exceptions
- The business partner duty applies 'where required by law'.
- 'Some of the ways' means the examples are not a complete list.