Group Retiree Solutions (GRS) Wellpoint notice of privacy practices

Security & Safeguards · Company commitment

Safeguards the insurer says it uses to protect PHI

The insurer says it is dedicated to protecting PHI and has set up policies and information practices to keep it secure and private. It says it keeps oral, written, and electronic PHI safe through procedures and physical and electronic means that follow federal and state laws, such as securing offices that hold PHI, password-protecting computers, and locking storage areas and filing cabinets. Employees must protect PHI under written policies that limit access to those who need the data for their jobs, and wear ID badges to keep unauthorized people out of areas where PHI is kept.

Supporting quotations

We’re dedicated to protecting your PHI, and we’ve set up a number of policies and information practices to help keep your PHI secure and private.

We keep your oral, written, and electronic PHI safe using the right procedures, and through physical and electronic ways.

Some of the ways we keep your PHI safe include securing offices that hold PHI, password-protecting computers, and locking storage areas and filing cabinets.

These policies limit access to PHI to only those employees who need the data to do their jobs.

Qualifications & exceptions

• The measures are examples ('Some of the ways').

Not stated here

• No specific technical standards, such as encryption, are described.

Security & Safeguards · Company commitment

Insurer must tell you if it believes your PHI has been breached

The notice says that if the insurer believes the member’s PHI has been breached, it must let the member know. No deadline, method, or content of the notice is given here.

Supporting quotations

If we believe your PHI has been breached, we must let you know.

Qualifications & exceptions

• Triggered by the insurer's belief that a breach occurred.

Not stated here

• Timing and form of breach notices are not stated.