Premera Blue Cross logo

Privacy & HIPAA

What does Premera do to protect my data?

Protecting your data is a priority at Premera. Premera is helping to lead the industry by ensuring that data is protected by strong encryption while in transit and strong authentication when transmitted to third-party applications. There are government regulations that also help ensure your data is protected by health care and insurance companies. One of those regulations is known as the Health Insurance Portability and Accountability Act, or HIPAA. Your personal health data is protected while in Premera systems by HIPAA.

All healthcare providers such as hospitals, doctors, clinics, and dentists are subject to HIPAA and are required to keep your information safe.

Find more information about your rights under HIPAA and who must comply with HIPAA. For more information regarding Premera privacy and security policies, or to report a privacy incident, contact customer service:

Note

Once you give a third-party app access to your personal health data, that data is no longer protected by HIPAA or Premera.

Covered entities and HIPAA enforcement

The U.S. Department of Health and Human Services’ Office for Civil Rights (OCR) enforces the HIPAA Privacy, Security, and Breach Notification Rules. Premera is subject to HIPAA as are most health care providers, such as hospitals, doctors, clinics, and dentists.

Find more information about your rights under HIPAA and who is obligated to comply with HIPAA.

Learn more about filing a complaint with OCR related to HIPAA requirements. You may also file a complaint with Premera by contacting customer service:

Apps and privacy enforcement

An external or third-party app generally will NOT be subject to HIPAA rules. An app that publishes a privacy notice is required to comply with the terms of its notice, but generally is not subject to other privacy laws. The Federal Trade Commission Act protects against deceptive acts (such as an app that discloses personal data in violation of its privacy notice).

An app that violates the terms of its privacy notice is subject to the jurisdiction of the Federal Trade Commission (FTC). The FTC provides information about mobile app privacy and security for consumers. If you believe an app inappropriately used, disclosed, or sold your information, you should contact the FTC.