Aetna Student Health plans notice of privacy practices

Legal Rights & Agreement Rules · Context

Covers Aetna's insured student plans, not plans a school self-funds

The notice says it applies to Aetna's insured health benefit plans and does not apply to any plans that a school funds itself. It describes Aetna Student Health as a brand name for products and services provided by Aetna Life Insurance Company and its applicable affiliated companies, and says fully insured student health insurance plans are underwritten by Aetna Life Insurance Company.

Supporting quotations

This Notice of Privacy Practices applies to Aetna’s insured health benefit plans. It does not apply to any plans that are self-funded by a school.

Fully insured student health insurance plans are underwritten by Aetna Life Insurance Company (Aetna).

is the brand name for products and services provided by Aetna Life Insurance Company and its applicable affiliated companies (Aetna).

Qualifications & exceptions

• Applies to Aetna's insured health benefit plans; it does not apply to plans self-funded by a school.

Not stated here

• The notice does not say which schools' plans are insured and which are self-funded, so it does not tell a student whether this notice covers their plan.

Legal Rights & Agreement Rules · Company commitment

Aetna says it treats personal information as confidential and protects it under law and its own policies

Aetna says it considers personal information confidential and protects it in line with federal and state privacy laws and its own company privacy policies. It says this notice describes how it may use and disclose information about you in administering your benefits, how you can get access to your medical information, and your legal rights regarding that information.

Supporting quotations

This notice describes how medical information about you may be used and disclosed and how you can get access to this information.

We protect the privacy of that information in accordance with federal and state privacy laws, as well as our own company privacy policies.

This notice describes how we may use and disclose information about you in administering your benefits, and it explains your legal rights regarding the information.

Qualifications & exceptions

• The stated purpose is administering your benefits.

Legal Rights & Agreement Rules · Context

What "personal information" and "health information" mean in this notice

In this notice, "personal information" means information that identifies you as an individual, such as your name and Social Security Number, plus financial, health and other nonpublic information about you that Aetna obtains so it can provide insurance coverage. "Health information" means information that identifies you and relates to your medical history, meaning the health care you receive or the amounts paid for that care.

Supporting quotations

When we use the term “personal information,” we mean information that identifies you as an individual, such as your name and Social Security Number, as well as financial, health and other information about you that is nonpublic, and that we obtain so we can provide you with insurance coverage.

By “health information,” we mean information that identifies you and relates to your medical history (i.e., the health care you receive or the amounts paid for that care).

Qualifications & exceptions

• Personal information is limited to nonpublic information Aetna obtains to provide coverage.

Not stated here

• Elsewhere the notice uses "PHI" and "protected health information" without a separate definition beyond the passing mention in the affiliated covered entity passage.

Legal Rights & Agreement Rules · Context

The notice states an October 1, 2025 effective date

The notice says it became effective on October 1, 2025. The page header carries the form code GR-68050 (2-26).

Supporting quotations

This notice became effective on October 1, 2025.

GR-68050 (2-26)

Not stated here

• The notice does not explain what "(2-26)" in the form code means, and does not state any other date, such as a revision date.

Legal Rights & Agreement Rules · Company practice

Regulators, workers' compensation and legal requirements

Aetna may disclose information to state insurance departments, the U.S. Department of Labor and other government agencies that regulate it, to comply with workers' compensation laws, and to comply with legal obligations and requirements.

Supporting quotations

Industry Regulation – to state insurance departments, U.S. Department of Labor and other government agencies that regulate us.

Workers’ Compensation – to comply with workers’ compensation laws.

As Required by Law – to comply with legal obligations and requirements.

Legal Rights & Agreement Rules · Company practice

Law enforcement: disclosure to federal, state and local law enforcement officials

Aetna may disclose information to federal, state and local law enforcement officials.

Supporting quotations

Law Enforcement – to federal, state, and local law enforcement officials.

Not stated here

• Unlike the neighboring items, this item states no condition or purpose; the notice does not say here what circumstances apply.

Legal Rights & Agreement Rules · Company practice

Legal proceedings: disclosure in response to a court order or other lawful process

Aetna may disclose information in response to a court order or other lawful process.

Supporting quotations

Legal Proceedings – in response to a court order or other lawful process.

Qualifications & exceptions

• Tied to a court order or other lawful process.

Legal Rights & Agreement Rules · Company practice

Public welfare: matters of public interest as required or permitted by law

Aetna may disclose information to address matters of public interest as required or permitted by law, for example child abuse and neglect, threats to public health and safety, and national security.

Supporting quotations

Public Welfare – to address matters of public interest as required or permitted by law (e.g., child abuse and neglect, threats to public health and safety, and national security).

Qualifications & exceptions

• As required or permitted by law; the examples are introduced with "e.g." and are not stated to be exhaustive.

Legal Rights & Agreement Rules · Company practice

Required disclosures: to you or your personal representative, and to the federal health secretary

Aetna says it must disclose your personal information to you or to someone with the legal right to act for you, your personal representative, to administer your rights under the notice, and to the Secretary of the Department of Health and Human Services as necessary for HIPAA compliance and enforcement.

Supporting quotations

Required Disclosures: We must use and disclose your personal information in the following manner:

To you or someone who has the legal right to act for you (your personal representative) in order to administer your rights as described in this notice

To the Secretary of the Department of Health and Human Services, as necessary, for HIPAA compliance and enforcement purposes.

Legal Rights & Agreement Rules · Restriction or exception

Stricter laws may protect sensitive categories of health information, and Aetna says it follows the stricter rule

Aetna says some state and federal laws may require special privacy protections, including requirements to obtain attestations from requestors, that limit use and disclosure of certain sensitive health information. The notice lists alcohol or substance use disorder, biometric information, child or adult abuse or neglect including sexual assault, communicable diseases, genetic information, HIV/AIDS, mental health, minors, reproductive health and sexually transmitted diseases. Aetna says it will follow the stricter, more protective law where it applies to Aetna, and you can contact the Aetna Privacy Office for more information.

Supporting quotations

Some state and federal laws may require special privacy protections, including certain requirements to obtain attestations from requestors, that limit the use and disclosure of certain sensitive health information. Such laws may protect information related to:

Alcohol or substance use disorder

Biometric Information

Child or adult abuse or neglect, including sexual assault

Communicable diseases

Genetic information

HIV/AIDs

Mental health

Minors

Reproductive health

Sexually transmitted diseases

We will follow the law that is stricter (or more protective of your PHI), where it applies to us. If you would like additional information about additional use or disclosure restrictions that may apply to your sensitive PHI, please contact the Aetna Privacy Office.

Qualifications & exceptions

• The list is of information that such laws "may" protect; it does not say which laws or states apply to your plan.
• Aetna follows the stricter law only "where it applies to us."

Not stated here

• The notice does not name the laws, say which apply to a given student plan, or explain what attestations from requestors involve.

Cross-references

• qualifies (model-proposed): Health care operations: Aetna may use and disclose information to run its health business — Aetna's general statement of operational uses is qualified by the later statement that it follows the stricter, more protective law for sensitive categories of information, where that law applies to Aetna.

Legal Rights & Agreement Rules · Restriction or exception

Without your permission, Aetna says it follows the more protective law in limited situations

Aetna says that in limited situations where it may disclose substance use disorder information without your permission, such as medical emergencies and government audits, it will follow the law that is more protective of your information.

Supporting quotations

In limited situations where we may disclose this information without your permission, such as medical emergencies and government audits, we will follow the law that is more protective of your information.

Qualifications & exceptions

• Limited situations; the examples given are medical emergencies and government audits, introduced with "such as."

Not stated here

• The notice does not list all the limited situations or say which law is more protective in each.

Cross-references

• narrowed by (model-proposed): Substance use disorder information is not used in a legal case against you without consent or a court order — Even where substance use disorder information may be disclosed without permission in limited situations, Aetna says it will not use or share it in a legal case against you without written consent or a court order.

Legal Rights & Agreement Rules · Restriction or exception

Substance use disorder information is not used in a legal case against you without consent or a court order

Aetna says it will not use or share this substance use disorder information in any legal case against you unless you give written consent, or a court orders Aetna with a subpoena or other legal requirement. The notice adds that you or Aetna must also receive notice and a chance to be heard.

Supporting quotations

We will not use or share this information in any legal case against you unless:

You give us written consent, or

A court orders us with a subpoena or other legal requirement.

You or Aetna must also receive notice and a chance to be heard.

Qualifications & exceptions

• Exceptions are written consent, or a court order backed by a subpoena or other legal requirement.
• You or Aetna must also receive notice and a chance to be heard.

Not stated here

• The phrase "You or Aetna" does not say who must receive notice in a given case or whether both must.

Cross-references

• narrows (model-proposed): Without your permission, Aetna says it follows the more protective law in limited situations — Even where substance use disorder information may be disclosed without permission in limited situations, Aetna says it will not use or share it in a legal case against you without written consent or a court order.

Legal Rights & Agreement Rules · Context

Your privacy rights come from the federal privacy regulations

The notice says the federal privacy regulations give you several rights regarding your health information, then lists them. They are described in the cards that follow.

Supporting quotations

The federal privacy regulations give you several rights regarding your health information.

Legal Rights & Agreement Rules · User right or choice

Pretext interviews: a right not to be subjected to them, and Aetna says it does not participate

You have a right, with very limited exceptions, not to be subjected to pretext interviews, and Aetna says it does not participate in pretext interviews.

Supporting quotations

You have the right with very limited exceptions, not to be subjected to pretext interviews.

We do not participate in pretext interviews.

Qualifications & exceptions

• Subject to very limited exceptions.

Not stated here

• The notice does not define pretext interviews or name the exceptions; a footnote marker "2" follows the right in the supplied text, but no footnote text for it appears in the supplied source.

Legal Rights & Agreement Rules · Company commitment

Federal privacy regulations require Aetna to keep personal information private and follow this notice

The notice says the federal privacy regulations require Aetna to keep your personal information private, to give you notice of its legal duties and privacy practices, and to follow the terms of the notice currently in effect.

Supporting quotations

The federal privacy regulations require us to keep personal information about you private, to give you notice of our legal duties and privacy practices, and to follow the terms of the notice currently in effect.

Legal Rights & Agreement Rules · Permission or license

Aetna may change the notice at any time, and new terms apply to information it already has

Aetna may change the terms of this notice and its privacy policies at any time. If it does, the new terms and policies apply to all the information it already has about you as well as any it receives or holds in the future.

Supporting quotations

We may change the terms of this notice and our privacy policies at any time. If we do, the new terms and policies will be effective for all of the information that we already have about you, as well as any information that we may receive or hold in the future.

Not stated here

• The notice does not say how members will be told of a change.