Skip to Content

We keep your information private

We make sure all information about our members is kept private, confidential and only used on a need-to-know basis. If you want to authorize others to access your information you can complete our release form. 

Get the form

Protecting your privacy

Security Health Plan guards your personal information with care. We make sure all information about our members is kept private and confidential and only used on a need-to-know basis.

What are a member’s rights under the HIPAA and who must follow HIPAA?

The U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) enforces the HIPAA Privacy, Security, and Breach Notification Rules, and the Patient Safety Act and Rule. You can find more information about patient/member rights under HIPAA and who is obligated to follow HIPAA here.

You may also find additional HIPAA frequently asked questions for individuals here.

Who must follow HIPAA?

“Covered entities” must follow HIPAA rules. This can include:

Health plans: Many health care providers that do business electronically. For example, if they bill your health insurance electronically. This can include: Health care clearinghouses
“Business associates” who provide certain services for covered entities must follow parts of the HIPAA rules. This can include: Many entities that have your health information do not need to follow HIPAA rules. These may include:

You can find more info from HHS about patient rights under HIPAA and who must follow HIPAA here.

Are third-party apps covered by HIPAA?

HIPAA will not cover most third party apps. Most third party apps will instead fall under the jurisdiction of the Federal Trade Commission (FTC) and the protections provided by the FTC Act. The FTC Act protects against deceptive acts (e.g., if an app shares personal data without permission, despite having a privacy policy that says it will not do so). The FTC provides information about mobile app privacy and security for consumers here.

Additional HIPAA Privacy and Security Information

Here are two additional resources from the U.S. Department of Health and Human Services (HHS) regarding privacy and security requirements and safeguards:

You may have authorized a third party to receive information from Security Health Plan via your My Security Health Plan credentials. Please note, Security Health Plan cannot be held responsible for the content, accuracy or quality of information, or quality of services or products, provided by or advertised on any third-party applications or the privacy practices implemented by them. We want you to know not all these third-party applications are required to follow Health Insurance Portability and Accountability Act (HIPAA) regulations and may not keep your information safe.

While we do not recommend that you share your protected health information with third parties, the proper and preferred method to do so by completing the Security Health Plan HIPAA Use and Disclose Protected Health Information Authorization form.

Please go to our Member Third Party Application page to read more information on sharing information with third party applications and the steps you should take when considering selecting an application to use your health data.

If you want to revoke your consent for any of the applications you may have previously authorized, simply log in to your My Security Health Plan account. Once logged in, click on “Authorized applications” on the left main menu. Then click the “Revoke consent” link by the listed application or applications you no longer want to receive your information. You must also send written notification to Security Health Plan revoking any previous HIPAA authorization.

Reporting Privacy or Security Issues or Filing a Compliant

If you think your personal health information has been breached, you may file a complaint with Security Health Plan. You may also submit a complaint to The U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR). If you believe a third-party application has used your data inappropriately (i.e., shares personal data without your permission), you may file a complaint with the Federal Trade Commission (FTC).

Security Health Plan:
Call 877-473-0911.
You may also refer to the Security Health Plan's Notice of Privacy Practices

To learn more about filing a complaint with OCR under HIPAA.
Individuals can file a complaint with OCR.
Individuals can file a complaint with the FTC.