1. When HIPAA applies
The HIPAA Privacy, Security, and Breach Notification Rules apply to HIPAA covered entities and to business associates for the obligations that apply to them. Not every insurance agency, insurance product, website interaction, or item of health-related information is subject to HIPAA.
My Insurance Lady Services may handle information in different legal roles depending on the service, carrier, plan, and transaction. When information is protected by HIPAA because we are acting in a role to which HIPAA applies, we handle that information consistent with applicable HIPAA requirements and the governing agreement. When HIPAA does not apply, other privacy, insurance, contractual, and data-security requirements may still apply.
2. Health-related information we may encounter
Depending on the service you request, conversations or application materials may include information about prescriptions, providers, coverage, eligibility, health-plan enrollment, or other health-related facts. We request only information reasonably needed for the service, transaction, or compliance function involved.
3. Uses and disclosures when HIPAA applies
When we handle protected health information in a HIPAA-regulated role, permitted uses and disclosures are governed by HIPAA, the applicable covered entity’s privacy practices, and any required business associate or other agreement. Depending on the relationship, information may be used or disclosed to perform the requested service, support plan or carrier operations, satisfy legal or regulatory duties, protect against fraud or security incidents, or as otherwise authorized by you or permitted by law.
4. Individual rights
HIPAA provides rights concerning protected health information maintained by covered entities, including rights that may involve access, amendment, restrictions, confidential communications, and certain disclosure information. The exact right and process depend on who maintains the record and the role in which the information is held.
If we maintain information solely as a business associate for a health plan or other covered entity, a rights request may need to be directed to that covered entity or handled through it. We will help route a request when reasonably possible.
5. Do not send sensitive health information through the callback form
The public website callback form is intended for basic contact information only. Do not enter a Medicare number, Social Security number, diagnosis, prescription list, medical record, payment-card number, or other sensitive health or financial information into that form.
If sensitive information is needed, call (682) 564-8821 and ask which channel should be used for the specific carrier, plan, enrollment platform, or service.
6. Questions and complaints
For questions about how My Insurance Lady Services handles health-related information, contact myinsurancelady24@gmail.com or (682) 564-8821.
If a HIPAA covered entity’s Notice of Privacy Practices applies to your information, that notice will explain how to submit a privacy complaint and how to contact the U.S. Department of Health and Human Services Office for Civil Rights. HHS also provides complaint information at hhs.gov/hipaa/filing-a-complaint.