Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Effective January 1, 2019

We¹ are required by law to protect the privacy of your health information. We are also required to send you this notice, which explains how we may use information about you and when we can give out or "disclose" that information to others. You also have rights regarding your health information that are described in this notice. We are required by law to abide by the terms of this notice. The terms “information” or “health information” in this notice include any information we maintain that reasonably can be used to identify you and that relates to your physical or mental health condition, the provision of health care to you, or the payment for such health care. We will comply with the requirements of applicable privacy laws related to notifying you in the event of a breach of your health information. We have the right to change our privacy practices and the terms of this notice. If we make a material change to our privacy practices, we will provide to you, in our next annual distribution, either a revised notice or information about the material change and how to obtain a revised notice. We will provide you with this information either by direct mail or electronically, in accordance with applicable law. In all cases, if we maintain a website for your particular health plan, we will post the revised notice on your health plan website, such as rmhp.org. We reserve the right to make any revised or changed notice effective for information we already have and for information that we receive in the future. Rocky Mountain Health Plans collects and maintains oral, written and electronic information to administer our business and to provide products, services and information of importance to our enrollees. We maintain physical, electronic and procedural security safeguards in the handling and maintenance of our enrollees’ information, in accordance with applicable state and federal standards, to protect against risks such as loss, destruction or misuse.

^{1 This Medical Information Notice of Privacy Practices applies to the following health plan that is affiliated with Rocky Mountain Health Plans: Rocky Mountain HMO, Inc.}

THIS NOTICE DESCRIBES HOW FINANCIAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED. PLEASE REVIEW IT CAREFULLY.

Effective January 1, 2019

We² are committed to maintaining the confidentiality of your personal financial information. For the purposes of this notice, "personal financial information" means information about an enrollee or an applicant for health care coverage that identifies the individual, is not generally publicly available, and is collected from the individual or is obtained in connection with providing health care coverage to the individual.

^{2 For purposes of this Financial Information Privacy Notice, “we” or “us” refers to the entities listed in footnote 1, listed under Medicare and Commercial - Medical Information Privacy Notice, plus the following UnitedHealthcare affiliates: Alere Women’s and Children’s Health, LLC; AmeriChoice Health Services, Inc.; CNIC Health Solutions, Inc.; LifePrint East, Inc.; Life Print Health, Inc.; Dental Benefit Providers, Inc.; gethealthinsurance.com Agency, Inc.; Golden Outlook, Inc.; HealthAllies, Inc.; MAMSI Insurance Resources, LLC; Managed Physical Network, Inc.; OneNet PPO, LLC; OptumHealth Care Solutions, Inc.; OrthoNet, LLC; OrthoNet of the Mid-Atlantic, Inc.; OrthoNet West, LLC; OrthoNet of the South, Inc.; Oxford Benefit Management, Inc.; Oxford Health Plans LLC; POMCO Network, Inc.; POMCO of Florida, Ltd.; POMCO West, Inc.; POMCO, Inc.; Rocky Mountain Health Plans; Spectera, Inc.; UMR, Inc.; Unison Administrative Services, LLC; United Behavioral Health; United Behavioral Health of New York I.P.A., Inc.; United HealthCare Services, Inc.; UnitedHealth Advisors, LLC; UnitedHealthcare Service LLC; UnitedHealthcare Services Company of the River Valley, Inc. This Financial Information Privacy Notice only applies where required by law. Specifically, it does not apply to (1) health care insurance products offered in Nevada by Health Plan of Nevada, Inc. and Sierra Health and Life Insurance Company, Inc.; or (2) other UnitedHealth Group health plans in states that provide exceptions for HIPAA covered entities or health insurance products.}

Revised: January 1, 2019

The first part of this Notice, which provides our privacy practices for Medical Information, describes how we may use and disclose your health and financial information under federal privacy rules. There are other laws that may limit our rights to use and disclose your health information beyond what we are allowed to do under the federal privacy rules. The purpose of the charts below is to:

1. show the categories of health information that are subject to these more restrictive laws; and
2. give you a general summary of when we can use and disclose your health information without your consent.

If your written consent is required under the more restrictive laws, the consent must meet the particular rules of the applicable federal or state law.

THIS NOTICE SAYS HOW YOUR MEDICAL INFORMATION MAY BE USED. IT SAYS HOW YOU CAN ACCESS THIS INFORMATION. READ IT CAREFULLY.

Effective January 1, 2019

By law, we¹ must protect the privacy of your health information ("HI"). We must send you this notice. It tells you:

• How we may use your HI.
• When we can share your HI with others.
• What rights you have to access your HI.

By law, we must follow the terms of this notice. HI is information about your health or health care services. We have the right to change our privacy practices for handling HI. If we change them, we will notify you by mail or e-mail. We will also post the new notice at this website (rmhp.org). We will notify you of a breach of your HI. We collect and keep your HI to run our business. HI may be oral, written or electronic. We limit employee and service provider access to your HI. We have safeguards in place to protect your HI.

^{1 This Medical Information Notice of Privacy Practices applies to the following health plan that is affiliated with Rocky Mountain Health Plans (RMHP): Rocky Mountain HMO, Inc.}

THIS NOTICE SAYS HOW YOUR FINANCIAL INFORMATION MAY BE USED AND SHARED. REVIEW IT CAREFULLY.

Effective January 1, 2019

We² protect your “personal financial information” (“FI”). FI is non-health information. FI identifies you and is generally not public.

^{2 For purposes of this Financial Information Privacy Notice, “we” or “us” refers to the entities listed in footnote 1,  listed under Medicaid- Medical Information Privacy Notice, plus the following UnitedHealthcare affiliates: Alere Women’s and Children’s Health, LLC; AmeriChoice Health Services, Inc.; CNIC Health Solutions, Inc.; Dental Benefit Providers, Inc.; gethealthinsurance.com Agency, Inc. Golden Outlook, Inc.; HealthAllies, Inc.; LifePrint East, Inc.; Life Print Health, Inc.; MAMSI Insurance Resources, LLC; Managed Physical Network, Inc.; OneNet PPO, LLC; OptumHealth Care Solutions, Inc.; OrthoNet, LLC; OrthoNet of the Mid-Atlantic, Inc.; OrthoNet West, LLC,; OrthoNet of the South, Inc.; Oxford Benefit Management, Inc.; Oxford Health Plans LLC; POMCO Network, Inc.; POMCO of Florida, Ltd.; POMCO West, Inc.; POMCO, Inc.; Rocky Mountain Health Plans; Spectera, Inc.; UMR, Inc.; Unison Administrative Services, LLC; United Behavioral Health; United Behavioral Health of New York I.P.A., Inc.; United HealthCare Services, Inc.; UnitedHealth Advisors, LLC; UnitedHealthcare Service LLC; UnitedHealthcare Services Company of the River Valley, Inc. This Financial Information Privacy Notice only applies where required by law. Specifically, it does not apply to (1) health care insurance products offered in Nevada by Health Plan of Nevada, Inc. and Sierra Health and Life Insurance Company, Inc.; or (2) other UnitedHealth Group health plans in states that provide exceptions.}

The first part of this Notice says how we may use and share your health and financial information under federal privacy rules. Other laws may limit these rights. The charts below:

1. Show the categories subject to stricter laws.
2. Give you a summary of when we can use and share your health information without your consent.

Your written consent, if needed, must meet the rules of the federal or state law that applies.