Orchard - Unchanged

Privacy Practices, Legal Notices & Disclaimers

This website is for informational purposes only and is intended to give a general overview of benefits available to PEHP members. Due to the various plans offered by PEHP to different employers, not all information on this site is applicable to all PEHP members. This site doesn’t create contractual rights or obligations of PEHP and its members for benefits or claims. The PEHP Master Policy is the contract between PEHP and its members, which creates and governs the rights and obligations of PEHP and its members and is available upon request from PEHP. The information on this site is offered "AS IS," without warranty of any kind. While every precaution has been taken in the preparation of this site, PEHP is not liable for any loss or damage caused or alleged to have been caused, directly or indirectly, by the information on this site. The information on this site is intended as a service to PEHP members and cannot be used for commercial gain.

© 2013 Public Employees Health Program, All Rights Reserved.


Notice of Privacy Practices for Protected Health Information effective August 31, 2013 

Public Employees Health Program (PEHP) our business associates and our affiliated companies respect your privacy and the confidentiality of your personal information.  In order to safeguard your privacy, we have adopted the following privacy principles and information practices. PEHP is required by law to maintain the privacy of your protected health information, and to provide you with this notice which describes PEHP’s legal duties and privacy practices. Our practices apply to current and former members.  

It is the policy of PEHP to treat all member information with the utmost discretion and confidentiality, and to prohibit improper release in accordance with the confidentiality requirements of state and federal laws and regulations.  


Types of Personal Information PEHP collects 

PEHP collects a variety of personal information to administer a member’s health, life, and long-term disability coverage. Some of the information members provide on enrollment forms, surveys, and correspondence includes: address, Social Security number, and dependent information. PEHP also receives personal information (such as eligibility and claims information) through transactions with our affiliates, members, employers, other insurers, and health care providers. This information is retained after a member’s coverage ends. PEHP limits the collection of personal information to that which is necessary to administer our business, provide  quality service, and meet regulatory requirements.   

Disclosure of your protected health information within PEHP is on a need-to-know basis. All employees are required to sign a confidentiality agreement as a condition of employment, whereby they agree not to request, use, or disclose the protected health information of PEHP members unless necessary to perform their job.  

Understanding Your Health Record/Information 

Each time you visit a hospital, physician, or other health care provider, a record of your visit is made. Typically, this record contains your symptoms, examination and test results, diagnoses, treatment, and a plan for future care or treatment. This information, often referred to as your health or medical record, serves as a: 

  • Basis for planning your care and treatment,
  • Means of communication among the many health professionals who contribute to your care,
  • Legal document describing the care you received,
  • Means by which you or a third-party payer can verify that services billed were actually provided.

Understanding what is in your record and how your health information is used helps you to: 

  • Ensure its accuracy,
  • Better understand who, what, when, where, and why others may access your health information,
  • Make more informed decisions when authorizing disclosure to others. 

Your Health Information Rights 

Although your health record is the physical property of the health care practitioner or facility that compiled it, the information belongs to you. You have the rights as outlined in Title 45 of the Code of Federal Regulations, Parts 160 & 164: 

  • Request a restriction on certain uses and disclosures of your information, though PEHP is not required to agree with your requested restriction. 
  • Obtain a paper copy of the notice of information practices upon request (although we have posted a copy on our web site, you have a right to a hard copy upon request.) 
  • Inspect and obtain a copy of your health record.
  • Amend your health records.
  • Obtain an accounting of disclosures of your health information.
  • Request communications of your health information by alternative means or at alternative locations.
  • Revoke your authorization to use or disclose health information except to the extent that action has already been taken. 

PEHP does not need to provide an accounting for disclosures: 

  • To persons involved in the individual’s care or for other notification purposes.
  • For national security or intelligence purposes.
  • Uses or disclosures of de-identified information or limited data set information.
  • That occurred before April 14, 2003. 

PEHP must provide the accounting within 60 days of receipt of your written request.   

The accounting must include: 

  • Date of each disclosure
  • Name and address of the organization or person who received the protected health information
  • Brief statement of the purpose of the disclosure that reasonably informs you of the basis for the disclosure or, in lieu of such statement, a copy of your written authorization, or a copy of the written request for disclosure. 

The first accounting in any 12-month period is free.  Thereafter, we reserve the right to charge a reasonable, cost-based fee. 

Examples of Uses and Disclosures of Protected Health Information 

PEHP will use your health information for treatment. 

For example: Information obtained by a nurse, physician, or other member of your health care team will be recorded in your record and used to determine the course of treatment that should work best for you. Your physician will document in your record his or her expectations of the members of your health care team. Members of your health care team will then record the actions they took and their observations. In that way, the physician will know how you are responding to treatment.  

Though PEHP does not provide direct treatment to individuals, we do use the health information described above for utilization and medical review purposes.  These review procedures facilitate the payment and/or denial of payment of health care services you may have received. All payments or denial decisions are made in accordance with the individual plan provisions and limitations as described in the applicable PEHP Master Policies.  

PEHP will use your health information for payment. 

For example: A bill for health care services you received may be sent to you or PEHP. The information on or accompanying the bill may include information that identifies you as well as your diagnosis, procedures, and supplies used.  

PEHP will use your health information for health operations. 

For example: The Medical Director, his or her staff, the risk or quality improvement manager, or members of the quality improvement team may use information in your health record to assess the care and outcomes in your case and others like it. This information will then be used in an effort to continually improve the quality and effectiveness of PEHP’s programs. 

If your coverage is through an employer sponsored group health plan, PEHP may share summary health information with the plan sponsor, such as your enrollment or disenrollment in the plan. PEHP may disclose protected health information for plan administration activities. PEHP will only do so after it receives a specific written request from the plan sponsor, which includes an agreement not to use your health information for employment related actions or decisions.  

There are certain uses and disclosures of your health information which are required or  permitted by Federal Regulations and do not require your consent or authorization.  Examples include:  

Public Health. 

As required by law, PEHP may disclose your health information to public health or legal  authorities charged with preventing or controlling disease, injury, or disability. 

Business Associates. 

There are some services provided in our organization through contacts with business associates. When such services are contracted, we may disclose your health information to our business  associates so that they can perform the job we’ve asked them to do. To protect your health  information, however, we require the business associates to appropriately safeguard your  information. 

Food and Drug Administration (FDA). 

PEHP may disclose to the FDA health information relative to adverse events with respect to food, supplements, product and product defects, or post-marketing surveillance information to enable  product recalls, repairs, or replacement.  

Workers Compensation. 

We may disclose health information to the extent authorized by and to the extent necessary to comply with laws relating to worker’s compensation or other similar programs established by law. 

Correctional Institution. 

Should you be an inmate of a correctional institution, we may disclose to the institution or agents thereof health information necessary for your health and the health and safety of other  individuals.  

Law Enforcement. 

We may disclose health information for law enforcement purposes as required by law or in  response to a valid subpoena. 

Federal law makes provisions for your health information to be released to an appropriate health  oversight agency, public health authority, or attorney provided that a workforce member or business associate believes in good faith that we have engaged in unlawful conduct or have otherwise violated professional or clinical standards and are potentially endangering one or more patients, workers, or the public. 

Our Responsibilities Under the Federal Privacy Standard 

PEHP is required to: 

  • Maintain the privacy of your health information, as required by law, and to provide individuals with notice of our legal duties and privacy practices with respect to protected health information. 
  • Provide you with this notice as to our legal duties and privacy practices with respect to protected health information we collect and maintain about you 
  • Abide by the terms of this notice.
  • Train our personnel concerning privacy and confidentiality.
  • Implement a policy to discipline those who violate PEHP’s privacy, confidentiality policies.
  • Mitigate (lessen the harm of) any breach of privacy, confidentiality. 
  • To notify affected individuals following a breach of unsecured protected health information.

We reserve the right to change our practices and to make the new provisions effective for all protected health information we maintain. Should we change our Notice of Privacy Practices you  will be notified.  

We will not use or disclose your health information without your consent or authorization, except as permitted or required by law. PEHP is prohibited from using or disclosing the genetic information of an  individual for underwriting purposes. 

Most uses and disclosures of psychotherapy notes, uses and disclosures of protected health  information for marketing purposes, and disclosures that constitute a sale of protected health information require your written authorization. Other uses and disclosures not described in this notice of privacy practices require your written authorization. 

Inspecting Your Health Information 

If you wish to inspect or obtain copies of your protected health information, please send your  written request to PEHP, Customer Service, 560 East 200 South, Salt Lake City, UT 84102-2099  We will arrange a convenient time for you to visit our office for inspection. We will provide copies  to you for a nominal fee. If your request for inspection or copying of your protected health  information is denied, we will provide you with the specific reasons and an opportunity to appeal our decision. 

For More Information or to Report a Problem 

If you have questions or would like additional information, you may contact the PEHP Customer Service Department at (801) 366-7555 or (800) 955-7347. 

If you believe your privacy rights have been violated, you can file a written complaint with our Chief Privacy Officer at:    

ATTN: PEHP Chief Privacy Officer 
560 East 200 South
Salt Lake City, UT 84102-2099. 

Alternately, you may file a complaint with the U.S. Secretary of Health and Human Services. There will be no retaliation for filing a complaint. 

Internet Privacy Notice

PEHP takes the safety of your information very seriously. Please take a moment to read this Privacy Notice.

PEHP has taken precautions to protect all personal information we request from you, via the Internet, using up-to-date electronic safeguards (e.g., Strong Encryption and Secure Socket Layer (SSL) technology) and procedural safeguards (e.g., PIN assignment and logging in to your personal accounts).

PEHP collects information about you to:

  • Accurately identify you;
  • Give you the ability to access your PEHP accounts over the Internet;
  • Protect your records and accounts.

Changes to your PEHP accounts

PEHP may collect the following information without using encryption and/or SSL via the Internet:

  • Feedback from submission;
  • Anonymous IP (Internet presence) address;
  • Website usage;
  • Internet browser and operating system platform;
  • Feedback from submission.

If you are submitting information using the feedback form (i.e., comments about the website), please be aware the information you are submitting is not encrypted. Therefore, it may be in your best interest not to submit personal information (e.g., your Social Security number).

In addition, if you participate in any systems, plans or programs outside of PEHP while you are a PEHP member, termination of your PEHP coverage will not terminate your participation in those systems, plans, or programs. Termination of such outside services must be done separately and through the agency that sponsored such services.


If you are submitting information using the feedback form (i.e., comments about the website), please be aware the information you are submitting is not encrypted. Therefore, it may be in your best interest not to submit personal information (e.g., your Social Security number).