US Family Health Plan Privacy Notice

US Family Health Plan Privacy


The Uniformed Services Family Health Plan (USFHP) at Martin’s Point Health Care is committed to protecting the confidentiality of your protected health information (PHI).  The US Family Health Plan takes the job of protecting your PHI seriously.  We maintain policies and procedures to protect PHI, and all employees receive training on how to protect PHI.  We also use physical and electronic safeguards to limit employee access to PHI.  Access to your PHI is restricted only to employees who “need to know” the information.

  1. Introduction to Privacy Notice

This Notice of Privacy Practices describes how the US Family Health Plan may use and disclose your protected health information (PHI) to provide health care coverage for you, to facilitate payment of the health care services provided by your doctor and to support the health care operations of our insurance plan.

 Martin’s Point provides this notice to you per the requirements of federal law, specifically the Health Insurance Portability and Accountability Act (HIPAA) Privacy Standards.  In addition to HIPAA, other state and federal laws provide to you additional protections for your health information related to treatment for mental health, alcohol and other substance abuse, and HIV/AIDS.  To the extent that state or federal laws and rules are more stringent that the HIPAA Privacy Standards, we will continue to follow these laws and rules.  The law requires Martin’s Point to notify you regarding:

-          What kind of PHI we collect about you and how we get it

-          How we use your PHI

-          What kind of PHI we release to other entities and organizations

-          How we protect your PHI from unauthorized use and disclosures

-          How you can obtain a copy of the PHI we have on file about you

PHI includes your demographic information such as name, address, telephone number, social security number, birth date and gender.  PHI also includes information regarding your health, illnesses, injuries and information about the medical services provided to you.  Martin’s Point collects your PHI from:

-          You (when you complete enrollment forms)

-          Your prior transactions with the US Family Health Plan

-          Your physician and other healthcare providers

-          Your transactions with others (your providers, employer or other health plans)

We may amend this Notice of Privacy Practices periodically and you may obtain a current copy of the Notice by contacting a US Family Health Plan member service representative or the Privacy Office.  We reserve the right to make the revised or changed Notice effective for PHI that we already have about you as well as for any PHI we receive in the future.  We will provide updates of any material change of this Notice, as required by law.

If you have any questions about Martin’s Point Generation Advantage Notice of Privacy Practices, please contact our Privacy contact at 207-253-6153.

2. Safeguarding PHI Within Martin’s Point Generation Facilities

Martin’s Point protects your PHI by using appropriate administrative, technical and physical safeguards.  We train regularly our employees on the obligation to protect the privacy of your PHI.  We secure health plan and claims records in each of our facilities.  Martin’s Point permits only those employees with a “need to know” access your health plan, claims, medical records, and other PHI.  We use physical and electronic safeguards to limit employee access to PHI.  We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information.

3. Uses and Disclosures of PHI for Treatment, Payment and Health Care Operations

The US Family Health Plan will use and disclose your PHI for the following types of activities:

-          Payment. Payment means our activities to pay for the medical services provided to you, including billing, claims management, and collection activities.  Payment activities also include our work in determining eligibility, claims processing, assessing medical necessity and utilization review.

-          Health Care Operations.  Health care operations mean the business activities of our health plan.  These activities include, for example, quality assessment and improvement activities, practitioner performance evaluation, member satisfaction surveys, fraud and abuse compliance, business planning and development, health education and general administrative activities.  For example, we may send you a newsletter about our health plan or a mailing about health plan activities.  We may also use or disclosure your PHI to contact you about health care quality improvement initiatives or health related benefits that may be of interest to you.  When we involve third parties in our business activities, we require them to treat your PHI the same way we do and sign formal contracts that outline their legal obligations to safeguard the use and disclosure of your PHI.

-          Fundraising. Martin’s Point may contact you during fundraising campaigns.  Martin’s Point is a non-profit organization.  As such, we may engage in fundraising efforts to support our mission.  We may use and disclose your PHI to contact you regarding our fundraising efforts.  You have the right to “opt out” of receiving fundraising communications by following the opt out instructions on the communication or contacting our Privacy Officer and making a request to opt out of receiving fundraising communications.

-          We are not allowed to use genetic information to decide whether we will give you coverage and the price of that coverage.

-           Please note that not every type of use or notice is listed in this Notice.

 4.  Uses and Disclosures of PHI Based Upon Your Written Authorization

Except as otherwise described in this Notice, we may not use or disclose your PHI without your written authorization, which you may revoke.

You may request that we disclose all or part of your PHI to a person or organization outside of Martin’s Point.  You may authorize MPHC to use and disclosure your PHI to specified individuals or other recipients for a defined purpose over a particular timeframe.  Martin’s Point will specifically require your authorization to disclose sensitive PHI, such as information about mental health or psychiatric treatment (unless an emergency situation exists), HIV status and substance abuse treatment.  While most authorizations must be in writing, in certain circumstances, we will accept oral authorizations to the extent permitted by Maine law.  Martin’s Point will disclose only the health information that you permit via your authorization.

You may revoke your authorization at any time, but only regarding future uses or disclosures and only to the extent we have not already used or disclosed your phi in reliance on your authorization.  We may also accept oral revocations and certain electronic revocations of authorizations, but we request that you follow this with a revocation in writing.

Martin’s Point may send you marketing materials.  In most circumstances, HIPAA and state laws may require us you to provide us written authorization before we use or disclosure your health information for marketing purposes.  However, we may provide you with promotional gifts of nominal value.

5.  Uses and Disclosures of PHI that are Permitted or Required by Law

In some circumstances, Martin’s Point may use of disclosure your PHI without your authorization.  State and federal privacy laws permit or require such use or disclosure regardless or your authorization because it is in the best interest of our society that the use of disclosure of PHI be made in these situation.

Emergencies.  If you are incapacitated and require medical treatment, we will use and disclosure your PHI to your medical providers to ensure you receive the necessary medical services.

Communication barriers.  If we try but cannot obtain your authorization to use or disclose PHI because of substantial communication barriers, we infer that you authorize the use or disclosure, the US Family Health Plan will make the use or disclosure.

Required by law.  We may disclose PHI to the extent required by law and in a manner limited to the specific requirement of the law.

Public health activities.  We may disclosure your PHI to a health oversight agency for audits, investigations, inspections and other activities necessary for the appropriate oversight of the health care system and the government benefit programs such as Medicaid and Medicare.

Judicial and administrative proceedings.  We may disclosure your PHI in the course of any judicial or administrative proceeding in response to an order expressly directing disclosure and within certain limits in response to a subpoena, discovery request, or other lawful purpose.

Law enforcement activities.  We may disclosure your PHI to a law enforcement officer for law enforcement purposes, or about a victim of a crime if, under limited circumstances, we are unable to obtain the person’s agreement; or in emergency circumstances, to report a crime, the location of the crime or victim, or the identity, description or location of the person who committed the crime.

Organ and tissues donation requests and work with a medical examiner or funeral director.  We can share health information about you with organ procurement organizations.  We can also share health information with a coroner, medical examiner, or funeral director when an individual passes away.

Research.  We may disclose your PHI for certain medical or scientific research where the researchers have a protocol to ensure the privacy of your PHI.

Serious threats to health and safety.  We may disclose you PHI to prevent or lessen a serious and imminent threat to the health or safety of a person or the public.

Armed forces personnel and national security.  We may disclose the PHI of members of the armed forces for activities deemed necessary by appropriate military command authorities to assure proper execution of the military mission.  We also may disclose your PHI to certain federal officials for lawful intelligence, counterintelligence, and other national security activities.

Correctional facilities.  Regarding inmates, we may disclose your PHI to a correctional institution or law enforcement official to the extent required by law, by court order or as authorization by law or rule.

Workers’ compensation.  We may disclose your PHI as authorized by and to the extent necessary to comply with the Maine Worker’s Compensation Act or other similar programs that provide benefits for work-related injuries or illness without regard to fault.

Depart of Health and Human Services.  We must disclose your PHI to the Secretary of the U.S. Department of Health & Human Services to investigate or determine Martin’s Point Generation’s Advantage compliance with the privacy laws.

6.   Your Rights Regarding PHI

We must disclosure your PHI to you upon request.  You have the following rights:

-          Right to request restriction of uses and disclosures.  You have the right to request that we not use or disclosure any part of your PHI unless it is a use or disclosure required by law.  Please advise us of the specific PHI you wish to restrict and the individual(s) who should not receive the restricted PHI.  We are not required to agree to your restriction request, but if we do agree to the request, we will not use or disclose the restricted PHI unless it is necessary for emergency treatment.  In that case, we will ask the recipient keep your PHI private and not disclose it to other persons or entities.  If certain conditions are met, we have the right to terminate our agreement to the restriction.

-          Right to access your PHI.  You have the right to receive and inspect a copy of your PHI.  You may not have a right to psychotherapy notes or information compiled in reasonable anticipation of a civil, criminal or administrative proceeding.  Also, your right of access may be limited if providing certain PHI to you may endanger the health or safety of yourself or others.  If we are unable to grant your request to access to your health information, we will inform you about the reason and your rights to challenge this decision within 30 days from the date of your request.  Contact us to find out how to access your PHI.  We have the right to charge a reasonable fee for providing copies of your PHI.

-          Right to confidential communications.  You can ask us to contact you in a specific way (for example, home or office phone) or to send mail to a different address.  We will consider all reasonable requests, and must say “yes” if you tell us you would be in danger if we do not.

-          Rights to choose someone to act for you.  If you have given someone medical or financial power of attorney or if someone is your legal guardian, that person can exercise your rights and make choice about your health information.  We will make sure the person has this authority and can act for you before we take any action.

-          Right to amend your PHI.  You have the right to request that we amend the PHI in your “designated record set” for as long as we maintain the PHI in such format.  Please make your request in writing to our Privacy Contact.  We will respond to your request as soon as possible, but no later than 60 days from the date of your request, unless we provide you with written notice regarding a delay.  If we deny your request for amendment, you have the right to submit a written statement of reasonable length disagreeing with the denial and we have the right to submit a rebuttal statement.  A record of any disagreement about amendment will become part of your medical records and may be included in subsequent disclosures of your PHI.  We will not delete and health information or PHI in your records.  We will require that you identify person who have received disclosure of the PHI that you have corrected, clarified or amended and will request your agreement to share the corrected, clarified or amended PHI with such person(s) and with our Business Associates or other that may have relied on the PHI to your detriment.

-          Right to accounting of disclosures.  Subject to certain limitations, you have the right to a written accounting of disclosures by us of your PHI for not more than 6 years prior to the date of your request.  Your right to an accounting applies to all disclosures except; those for treatment, payment, or health care operations; to yourself, to your legal guardian or persons with Power of Attorney involved in your care; or for notification purposes.  Please make your request in writing to our Privacy Contact.  We will respond to your request as soon as possible, but no later than 60 days from the date of your request, unless we provide you with written Notice regarding a delay.  We will provide you with one accounting every 12 months free of charge.  We will charge a reasonable fee based upon our costs for any subsequent accounting requests.

-          Right to a copy of our Notice of Privacy Practices.  We will ask you to sign a written acknowledgement of receipt of our Notice of Privacy Practices.  We may periodically amend the Notice of Privacy Practices and you may obtain an updated Notice from our Privacy Contact at any time.


7.  If you Have a Complaint

-          If you have a complaint about the denial of any of the specific rights listed in Section 6 above about our Notice of Privacy Practices, or about our compliance with state and federal privacy law, please make your complaint in writing to our Privacy Contact.  We will respond to your complaint in writing within the periods listed in Section 6 above or in any case within 60 days of the date of your complaint. 

Please write to:
Privacy Contact
c/o Compliance Department
PO Box 9746
Portland, ME 04104

-          If you believe we are not complying with our legal obligations to protect the privacy of your PHI, you may file a complaint with the Secretary of the U.S. Department of Health & Human Services. 

-          Send your complaint to:  Medical Privacy, Complaint Division, Office for Civil Rights (OCR) United States Department of Health and Human Services, 200 Independence Avenue SW, Room 509F, HHH Building Washington DC, 20201

-          You may also contact OCR's Voice Hotline Number at (800) 368-1019 or send the information to their Internet address 

Martin’s Point Health Care will not take retaliatory action against you if you file a complaint about our privacy practices with us or with the Office for Civil Rights.

If you have any questions about Martin’s Point Generation Advantage’s Notice of Privacy Practices, please contact our Privacy Contact at 207.253.6153.