Privacy Statement

Privacy Notice and Authorization

CAN is committed to protecting your privacy and developing technology that gives you the most powerful and safe online experience. This Privacy Notice and Authorization applies to the CAN website and governs personal and healthcare data collection and usage. By using the CAN website and affirmatively acknowledging this Privacy Notice and Authorization, you consent to the data practices described in this Notice and Authorization.

What Information is Collected About You:

As a member of a CAN program, your personal and health information, including, but not limited to, your name, address, telephone number, email address, social security number, member identification number, medical records, billing records, claims information, information on your medical conditions, prescribed medications, health risk status, and other health and wellness-related information ("Personal Health Information"), needs to be collected, maintained and made available to CAN employees and strategic partners so that CAN can administer the various programs it offers. CAN also collects anonymous demographic information, which is not unique to you, such as your age, zip code, gender, preferences, and interests.

How Your Information May Be Used or Disclosed:

CAN will use and disclose your Personal Health Information only as necessary to administer CAN's Programs. For example, we may use your Personal Health Information to assist you and provide administrative or coaching services and various wellness programs. We may also disclose your Personal Health Information with contracted service providers and trusted strategic partners. CAN does not use or disclose sensitive personal information, such as race, religion, or political affiliations, without your explicit consent. Under no circumstances will genetic information be used for underwriting purposes. There is also information about your computer hardware and software that is automatically collected by CAN. This information can include your IP address, browser type, domain names, access times, and referring website addresses. This information is used by CAN for the operation of the service, to maintain the quality of the service, and to provide general statistics regarding use of the CAN website. CAN cannot read or access any of your private online communications, other than those sent specifically to CAN.

CAN collects and uses your Personal Health Information to operate the CAN website and to deliver the services you have requested. The only persons who will receive your individually identifiable health information are you and the persons or entities who need the information so health and wellness services can be delivered to you. CAN does not sell, exchange, share, transfer or otherwise disclose your health information except as needed to carry out specific activities related to the wellness program. For example, CAN may share data with trusted strategic partners, some of whom may provide services on the CAN website. Other strategic partners may help us perform statistical analysis, send you email or provide customer support. All such third parties are prohibited from using your personal information except to provide these services on CAN’s behalf, and they are required by contract, if not law, to maintain the privacy and security of your personal information. However, it should be noted that once your Personal Health Information is re-disclosed to or by third parties, it may no longer be protected by the HIPAA privacy rule. In addition, CAN also does not sell, rent, or lease its customer lists to third parties.

Use of Cookies

The CAN website uses "cookies" to help you personalize your online experience. A cookie is a text file that is placed on your hard disk by a web page server. Cookies cannot be used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to you, and can only be read by a web server in the domain that issued the cookie to you.

One of the primary purposes of cookies is to provide a convenience feature to save you time. The purpose of a cookie is to tell the web server that you have returned to a specific page. For example, if you personalize your CAN pages, or register with the CAN site or services, a cookie helps CAN to recall your specific information on subsequent visits. This simplifies the process of recording your personal information. When you return to the same CAN website, the information you previously provided can be retrieved, so you can easily use the CAN features that you customized.

You have the ability to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. If you choose to decline cookies, you may not be able to fully experience the interactive features of the CAN website.

Your Use of Other Websites

CAN encourages you to review the privacy notices of websites you choose to link to from CAN so that you can understand how those websites collect, use and share your information. CAN is not responsible for the privacy notices or other content on websites outside of the CAN website.

Disclaimer:

CAN does not provide health insurance or medical services. Consequently, all medical services are provided by independent healthcare practitioners, who are not employees or agents of CAN. CAN provides administrative and informational services through its employees. All of CAN's services are offered in a manner that fully respects and protects the privacy of our members and the confidentiality of their Personal Health Information.

Security of your Personal Information:

CAN follows the HIPAA Security Rule and trains its employees on privacy and security requirements. CAN secures your Personal Health Information on computer servers in a controlled, secure environment, protected from unauthorized access, use or disclosure. When personal information is transmitted to other websites, it is protected through the use of encryption, such as the Secure Socket Layer (SSL) protocol.

Changes to this Notice:

CAN will occasionally update this Privacy Notice to reflect Company and customer feedback or changes in law. CAN encourages you to periodically review this Privacy Notice to be informed about how Health Advocate is protecting your information.

Contact Information:

CAN welcomes your comments regarding this Privacy Notice and Authorization. If you believe that CAN has not adhered to this Notice, please contact us. We will use commercially reasonable efforts to promptly determine and remedy your concern.

Authorization

By clicking "Agree" on this website, I hereby authorize CAN, if necessary, to use or disclose my health information collected during my health screening for the purposes of my continued Health Education or Care Management over the duration of my participation in the program. This authorization expires upon termination of my enrollment in the program unless another date is indicated to CAN.

I further agree, understand, and acknowledge my rights in relation to the following:

  • This Notice and Authorization is meant to address federal laws regulating the form and content of notices and authorizations for use and disclosure of health information, including, but not limited to, the Americans with Disabilities Act (ADA), and the Health Insurance Portability and Accountability Act (HIPAA).

  • I may refuse to agree to this Notice and Authorization. But if I do refuse to provide my authorization, I may not participate in the health screening.

  • CAN will ensure my rights of access, amendment and accounting with respect to the Personal Health Information it maintains about me on behalf of HIPAA covered entities.

  • I am entitled to a copy of this authorization upon request.

  • I may ask questions about the health information collected about me or make requests about this Notice and Authorization by contacting CAN.

  • I may also complain to CAN or the Secretary HHS if I believe my privacy rights have been violated, and no retaliatory actions will be taken against me for filing a complaint.