This Notice of Privacy Practices explains how health and financial information about the member may be used and shared and how the member can access it. It applies to all electronic and paper records Highmark creates, obtains, or maintains about the member as a member, and to all forms of communication of that information. It does not apply to Highmark in the context of being an employer.
Supporting quotations
THIS NOTICE DESCRIBES HOW HEALTH AND FINANCIAL INFORMATION ABOUT YOU MAY BE USED AND SHARED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
This Notice applies to all electronic and paper records we create, obtain, or maintain about you as a member, as well as all forms of communication (oral, written, and electronic) of this information. This Notice does not apply to Highmark in the context of being an employer.
Legal Rights & Agreement Rules · Company commitment
Highmark's privacy responsibilities and combined notices
Highmark Health, including its wholly-owned health plan subsidiaries and affiliates, states it is required by law to maintain the privacy and security of health and non-public personal (financial) information and to provide notice of members' rights and its duties. This Notice combines the HIPAA notice of privacy practices and the GLBA privacy notice.
Supporting quotations
At Highmark Health, including its wholly-owned health plan subsidiaries and affiliates (Highmark), we value your privacy. When it comes to managing your information, we are required by law to maintain the privacy and security of your health and non-public personal (financial) information and to provide you with notice of your rights and our duties to keep your information safe and confidential. This Notice of Privacy Practices combines two required privacy notices:
Health Insurance Portability and Accountability Act (HIPAA) notice of privacy practices
Gramm Leach Bliley Act (GLBA) privacy notice
Not stated here
The GLBA privacy notice text is not supplied in this source; this card cannot describe its contents.
Legal Rights & Agreement Rules · User right or choice
Withdrawal of authorization
Highmark will not use or share information other than as described in the Notice or as permitted or required by applicable law unless the member authorizes it in writing. The member may change their mind at any time by notifying Highmark in writing. Withdrawal is effective for future uses and disclosures and does not affect uses or disclosures already made under the previous authorization.
Supporting quotations
We will not use or share your information other than as described in this Notice, or as permitted or required by applicable law, unless you tell us we can in writing.
Cross-references
qualifies (model-proposed): Uses and disclosures requiring written authorization — qualifies: Withdrawal of authorization is effective only for future uses and disclosures and does not affect disclosures already made under the prior authorization.
Legal Rights & Agreement Rules · Company commitment
Compliance with stricter state and federal laws
Highmark must comply with federal and state laws when they offer greater privacy protection for certain types of PHI, and will follow the stricter laws related to use and sharing of sensitive PHI, including genetic information; HIV/AIDS testing, diagnosis, or treatment; venereal or communicable disease testing, diagnosis, or treatment; alcohol or drug abuse prevention, treatment, and referral; and psychotherapy notes.
Supporting quotations
We are required to comply with federal and state laws when they offer greater privacy protection for certain types of PHI.
Genetic information;
HIV/AIDS testing, diagnosis, or treatment;
Venereal or communicable disease testing, diagnosis, or treatment;
Alcohol or drug abuse prevention, treatment, and referral;
Highmark may revise the terms of the Notice on an ongoing basis. Any changes apply to all information Highmark has about the member. If the Notice significantly changes, the new Notice will be available upon request, on the website, and mailed in the annual mailing.
Supporting quotations
On an ongoing basis, it may become necessary to revise the terms of this Notice. Any changes will apply to all information we have about you.
Legal Rights & Agreement Rules · User right or choice
Complaints and no retaliation
Members may complain to Highmark using the listed contact (Privacy Operations, 120 Fifth Avenue Place, Suite 2114, Pittsburgh, PA 15222, 1-800-985-2050, HighmarkHealthPrivacy@highmarkhealth.org) or to the U.S. Department of Health and Human Services (Office for Civil Rights, 200 Independence Avenue S.W., Washington, D.C. 20201, 1-877-696-6775, hhs.gov/ocr/privacy/hipaa/complaints). Highmark supports the right to protect PHI privacy and will not retaliate for filing a complaint with Highmark or HHS.
Supporting quotations
If you want more information about our privacy practices or are concerned that we may have violated your privacy rights, you can complain to us using the following contact information:
You may also file a complaint with the U.S. Department of Health and Human Services by using the following contact information:
We support your right to protect the privacy of your PHI. We will not retaliate in any way if you choose to file a complaint with us or with the U.S. Department of Health and Human Services.
Legal Rights & Agreement Rules · Context
Effective date
Highmark must follow the privacy practices described in the Notice while it is in effect. The Notice is revised and effective as of Sept. 2025 and remains in effect unless replaced.
Supporting quotations
We must follow the privacy practices described in this Notice while it is in effect. This Notice is revised and effective as of Sept. 2025 and will remain in effect unless we replace it.
Legal Rights & Agreement Rules · Context
Additional provisions for substance use disorder (SUD) records
Additional provisions apply only to federally regulated SUD records. SUD records are protected by federal and state privacy laws. Unless specifically indicated, SUD records have the same protections and members have the same rights as described elsewhere in the Notice. The provisions identify added protections required by law.
Supporting quotations
ADDITIONAL PROVISIONS: PRIVACY PRACTICES RELATED TO SUBSTANCE USE DISORDER (SUD) RECORDS
These additional provisions to this Notice apply only to federally regulated SUD records.
Cross-references
qualifies (model-proposed): Notice of Privacy Practices: purpose and scope — qualifies: The additional SUD provisions apply only to federally regulated SUD records and add protections beyond the general Notice.
Legal Rights & Agreement Rules · Restriction or exception
Prohibition on using SUD records in proceedings
Highmark will not use or share SUD records, or provide testimony based on such information, in any civil, criminal, administrative, or legislative proceedings against the member unless the member provides written consent, or a special type of court order is obtained and the member has had the opportunity to object.
Supporting quotations
We will not use or share your SUD records (or provide testimony based on such information) in any civil, criminal, administrative, or legislative proceedings against you, unless you have provided your written consent, or a special type of court order has been obtained, and you have had the opportunity to object.
Legal Rights & Agreement Rules · Context
Highmark entity and regional licensee scope
Highmark Health includes wholly-owned subsidiaries and affiliates making up the Highmark Health enterprise, including Highmark Inc., Highmark Wholecare, Highmark Health Options, Allegheny Health Network, enGen, Helion, HM Insurance Group, and United Concordia Companies Inc. References to 'us,' 'we,' and 'our' mean Highmark Health. References to 'Highmark' are to the Highmark company providing the member's health benefits or benefit administration and/or one or more affiliated Blue companies. Benefits or administration may be provided by or through listed independent licensees of the Blue Cross Blue Shield Association by region (Western and Northeastern PA, Central and Southeastern PA, Delaware, West Virginia, Western NY, Northeastern NY).
Supporting quotations
*Highmark Health includes the wholly-owned subsidiaries and affiliates making up the Highmark Health enterprise
All references to “Highmark” in this document are references to the Highmark company that is providing the member’s health benefits or health benefit administration and/or to one or more of its affiliated Blue companies.
Western and Northeastern PA: Highmark Inc. d/b/a Highmark Blue Cross Blue Shield
Central and Southeastern PA: Highmark Inc. d/b/a Highmark Blue Shield, Highmark Benefits Group Inc., Highmark Health Insurance Company, Highmark Choice Company, Highmark Senior Health Company, or Gateway Health Plan, Inc. d/b/a Highmark Wholecare.
Delaware: Highmark BCBSD Inc. d/b/a Highmark Blue Cross Blue Shield or Highmark BCBSD Health Options Inc. d/b/a Highmark Health Options.
West Virginia: Highmark West Virginia Inc. d/b/a Highmark Blue Cross Blue Shield, Highmark Health Insurance Company, Highmark Senior Solutions Company, or Highmark Health Options West Virginia Inc. d/b/a Highmark Health Options and Highmark Blue Cross Blue Shield.
Western NY: Highmark Western and Northeastern New York Inc. d/b/a Highmark Blue Cross Blue Shield.
Northeastern NY: Highmark Western and Northeastern New York Inc. d/b/a Highmark Blue Shield.