PCIP’s Notice of Privacy Practices (NPP) outlines use and disclosure of protected health information (PHI) as required by the Health Insurance Portability and Accountability Act (HIPAA). The NPP has been provided to each PCIP enrollee, and is also available for viewing on the PCIP corporate website, www.pciplan.com, by clicking on "Forms & Resources" and then on "Privacy materials." This further outlines ways PCIP works to protect your health information, as we provide health benefits to meet your medical needs.
As outlined in the Notice of Privacy Practices (NPP), PCIP shares protected health information with some third party vendors, known as Business Associates under HIPAA, who work on behalf of PCIP in performing various activities (such as, but not limited to, Express Scripts/Medco and MedSolutions).
PCIP has a written contract with each Business Associate to ensure they protect the privacy of your protected health information to the same extent as PCIP. The Business Associate is responsible to extend the same requirements to any subcontractors or agents it may use. An "Effect of Termination" clause outlines the required handling of all protected health information if a Business Associate contract terminates for any reason:
Computer systems: PCIP maintains computer system security features that protect against unauthorized disclosure of PHI, and maintains policies and procedures that outline the method to establish, document, review, and modify a user's right of access to a workstation, transaction, program, or process. Appropriate system access is determined for each employee as required for their specific job responsibilities, and the employee is granted access into a system through an identification/authorization process based on a unique User ID/password combination. Auditing processes monitor system access.
Breach notification PCIP takes enrollees' privacy and security of protected health information very seriously and has processes in place to provide written notification to our enrollees as required by law for breaches of privacy. Enrollees also have the right to request an accounting of disclosures for any disclosures other than for purposes of payment, treatment and health care operations.