We care about your privacy of your health information

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

ArrayRx and the ArrayRx Discount Card are administered by Moda Health Plan, Inc. (“Moda”). ArrayRx and Moda are collectively referred to as “we” or “our” in this privacy notice.

We respect the privacy of your protected health information. We will keep it confidential in a responsible and professional manner. Protected health information includes any information related to your healthcare that can identify you as the person who receives the healthcare services. We are required by law to provide you with this notice and abide by its terms.
This notice explains how we gather and use information about you and when we can share this information with others. It also describes how you can exercise these rights.

How we collect and protect information

We collect information when you sign up for the ArrayRx Discount Card. Examples of information gathered are: name, Date of Birth, email address, and other information needed to sign up for the ArrayRx Discount Card. We also collect information from pharmacy transactions with Moda, our affiliates and subcontractors, and third parties that process pharmacy claims or perform other functions. This includes information that is gathered electronically or by telephone.

We keep your information secure through physical, technical and procedural safeguards. All information collected is treated in a confidential and secure manner.

How we use or share information

 Privacy laws permit uses and disclosures of your health information, as described below, for treatment, payment, and healthcare operations, and other limited purposes without your authorization. 

• Treatment: We can use and disclose health information about you to provide you with pharmacy care or services. For example, information related to your treatment may be communicated with and obtained from a healthcare provider, such as a pharmacist, nurse, or other person providing health services to you.
• Payment: We may use and disclose health information about you to process and pay pharmacy claims that have been submitted to us by pharmacies. For example, we may work with third party payers or other entities for purposes of processing pharmacy claims.
• Healthcare operations: We may use and disclose health information about you for administrative and operational purposes. For example, we may share health information about you with the state sponsor of your ArrayRx Discount Card. This permits them to perform administrative functions. 

Providing healthcare information where it’s needed

We may use information about you for the following reasons:

• To individuals involved in your care or payment for your care. We may disclose to a family member, other relative, close personal friend, or any other person whom you designate, health information about you that is directly relevant to that person’s involvement in your care. We will, to the extent possible, ensure that you have agreed to this.
• To business associates. We provide some services through contracts with business associates who perform certain business functions for us. For example, we may share your information with a company that does data entry for us. To protect your health information, we require business associates to appropriately safeguard health information about you.

Additional types of disclosures

 We will not use or disclose your protected health information unless we are allowed or required by law to do so. We may make additional types of disclosures to:

• State and federal agencies that regulate us. (For example, the U.S. Department of Health and Human Services and the State Insurance Department.)
• Authorized public health agencies. For example, we may report problems with a prescription drug to the Food and Drug Administration.
• Appropriate authorities, if we believe you are a victim of child abuse or neglect, domestic violence or other crimes.
• The appropriate agencies, if we believe there is a serious health or safety threat to you or others.
• Health oversight agencies for activities authorized by law. This includes audits, criminal investigations, licensure or disciplinary actions.
• Law enforcement agencies for identification and location of a suspect, fugitive, material witness, crime victim or missing person.
• A court or administrative agency in response to a search warrant, subpoena or other lawful process.
• Coroners, medical examiners and organ procurement entities, and for research in limited cases.
• Military authorities and authorized federal officials for intelligence, counterintelligence, and other national security activities.
• Comply with laws relating to workers’ compensation or other similar programs.
• Public or private entities authorized by law to help with disaster relief efforts.

Where your authorization is required

You must authorize the use or disclosure of your information, except when allowed or required by law. Examples of when your authorization is required include but are not limited to:

• Most uses and disclosures of psychotherapy notes.
• Uses and disclosures of your protected health information for marketing purposes.
• Disclosures that would mean the sale of your protected health information.

Know your rights

Your rights include the right to:

• Request that we not use or disclose your protected health information for treatment, payment or healthcare operations, or to persons involved in your care. Exceptions include when authorized by you, when required by law or in an emergency. The request must be made in writing. While we will consider your request, we are not required to agree to these restrictions.
• Request that your protected health information be shared with you in a confidential manner. For example, you may ask us to send mail to an address other than your home. The request must be made in writing.
• In most cases, receive a copy of protected health information records that we use to make decisions about your care. The request must be made in writing. We may charge a reasonable fee for copying and postage.
• Request that we amend your records. You may inform us if you believe that some of your protected health information is incorrect or missing. Your request must be in writing and include the basis for your request. We may deny your request if the information was not created by us, if it is not maintained by us, or if we determine that the record is accurate.
• Be notified of a breach of your unsecured protected health information.
• Receive an accounting of certain ways we disclosed your information during the six years prior to your request. The accounting will not include disclosures that were made:
  • For treatment, and healthcare operations purposes
  • To you
  • Incidental to a use or disclosure otherwise permitted
  • Following your authorization
  • To persons involved in your care
  • For national security or intelligence purposes
  • To correctional institutions or law enforcement agencies
  • As part of a limited data set for research, public health or healthcare operations purposes; and
  • Prior to April 14, 2003

We will provide one accounting, upon request, every 12 months at no charge. We may charge a fee for an additional accounting within 12 months. We will inform you in advance of the fee and allow you to withdraw or modify your request.

Exercising your rights

• You have a right to receive a paper copy of this notice upon request at any time. To request a paper copy, please call Customer Service toll-free at 800-913-4146.
• Customer Service representatives are available Monday through Friday from 7:30 a.m. to 5:30 p.m. Pacific Time.
• If you have any questions about this notice or about how we use or disclose information, please contact the Moda Health Privacy Office at 855-425-4192, or by email at privacy@modahealth.com.
• If you believe your privacy rights have been violated, you may send a complaint to:
  ArrayRX
  c/o Moda Health
  Attn: Privacy Office
  601 SW Second Ave.
  Portland, OR 97204
• You may also file a written complaint with the Department of Health and Human Services (HHS), Office of Civil Rights. Visit www.hhs.gov/ocr to find the contact information. You may also contact our office for more specific information.
• We will not take any action against you for filing a complaint

Changes to our notice

This notice is effective on August 1, 2013. We reserve the right to change the terms of this notice and to make the new notice effective for all protected health information we maintain. If revised, we will notify you that a change has been made by sending you a new Notice of Privacy Practices. The new notice will also be available online at arrayrxcard.com.