Privacy Notice

Not use or further disclose protected health information other than as permitted or required by law;
Not use or disclose protected health information that is genetic information for underwriting purposes;
Ensure that any agents (such as an outside claims administrator) to whom the Medical Plan gives protected health information agree to the same restrictions and conditions that apply to the Medical Plan with respect to this information;
Not use or disclose the information for employment-related actions and decisions or in connection with any other benefit or employee benefit plan of JPMorgan Chase;
Notify you if a breach of your protected health information is discovered;
Report to the JPMorgan Chase HIPAA Privacy Officer any use or disclosure of the information that is inconsistent with the designated protected health information uses or disclosures;
Obtain your authorization for any use or disclosure of protected health information for marketing, or that is a sale of the protected health information as defined under applicable law;
Make available protected health information in accordance with individuals' rights to review such personal information;
Make available protected health information for amendment and incorporate any amendments to protected health information consistent with the HIPAA rules;
Make available the information required to provide an accounting of disclosures in accordance with the HIPAA rules;
Make the Medical Plan's internal practices, books, and records relating to the use and disclosure of protected health information received from the claims administrators available to the Secretary of Health and Human Services for purposes of determining the Medical Plan's compliance with HIPAA;
Return or destroy all protected health information received in any form from the claims administrators. The Medical Plan will not retain copies of protected health information once it is no longer needed for the purpose of a disclosure. An exception may apply if the return or destruction of protected health information is not feasible. However, the Medical Plan must limit further uses and disclosures of this information to those purposes that make the return or destruction of the information infeasible; and
Request your authorization to use or disclose psychotherapy notes except as permitted by law, which would include for the purposes of carrying out the following treatment, payment or health care operations:
Use by the originator of psychotherapy notes for treatment;
Use or disclosure by the Medical Plan for its own training program; or
Use or disclosure by the Medical Plan to defend itself in a legal action or other proceeding brought by you.