The Pennsylvania Insurance Department (PID) issued an approving Determination and Order that approved the corporate affiliation between the West Penn Allegheny Health System and Highmark Inc. and its subsidiaries and affiliates, which preceded the creation of the Allegheny Health Network. As a condition of the PID order, Highmark Health has adopted the Competitively Sensitive Information (CSI) Policy throughout Highmark Health to protect CSI against inappropriate access, use, or disclosure among members of the Highmark Health workforce.
Federal regulations require us to provide you with a Health Insurance Portability and Accountability Act (HIPAA) Notice of Privacy Practices. The Notice explains how your protected health information (PHI) may be used or disclosed. It also explains your rights to this information under the law. This Notice of Privacy Practices also includes our Gramm-Leach-Bliley Act (GLBA) Notice and explains how we use and share your non-public personal information to administer our benefit programs effectively. Please review the Notice carefully.
This policy explains how we collect, use, disclose, and secure your personal information when you access and interact with our websites, mobile applications, and related digital assets. This policy does not apply to Protected Health Information. Notices governing Highmark’s processing of Protected Health Information are available within our Notice of Privacy Practices.
Highmark Inc. participates in an organized health care arrangement (“OHCA”), as permitted by the Health Insurance Portability and Accountability Act (“HIPAA”), with Allegheny Health Network, an affiliated entity under common ownership and control with Highmark Inc. An OHCA is a framework that allows health plan covered entities affiliated with Highmark Inc. and provider covered entities affiliated with Allegheny Health Network to share protected health information about members or patients for joint healthcare operations of the OHCA. HIPAA recognizes the following categories of joint purposes for which identifiable information can be shared among OHCA participants: quality assessment and improvement, utilization review, and related activities.
The following statement describes Highmark Health’s processing of Personal Data in compliance with the General Data Protection Regulation governing personal data collected from individuals in the European Union (EU).
