• Ensure privacy of your Protected Health Information (PHI) by maintaining physical, electronic and procedural safeguards that comply with legal requirements. PHI includes oral, written or electronic information that identifies you and relates to your physical or mental health.

• Provide you with notice of its legal duties and practices concerning your protected health information.

• Follow the terms of the notice that is currently in effect.

• Promptly notify you if a breach occurs that may have compromised the privacy or security of your information.

St. Luke’s Health Plan may use or disclose protected health information so that health care providers may provide treatment to you. For example, medical information may be disclosed to doctors, nurses, technicians, medical students or other hospital or medical personnel who are involved in taking care of you.

St. Luke’s Health Plan may use or disclose protected health information to determine or fulfill its responsibility for coverage and the provision of benefits under the Plan.

Examples of “payment” activities include but are not limited to: determining eligibility or coverage for Plan benefits, facilitating payment for the treatment services you receive from health care providers, coordinating benefits under the Plan and facilitating the adjudication or subrogation of health care claims. St. Luke’s Health Plan may also 
use or disclose protected health information in order to review health care services for medical necessity, appropriateness of care or justification of charges, and to facilitate utilization review activities, including precertification and preauthorization of services, concurrent and retrospective review.

St. Luke’s Health Plan may use or disclose protected health information for certain operations to run the Plan. Examples of St. Luke’s Health Plan “operations” include but are not limited to: providing customer service, conducting quality assessment and improvement activities; underwriting or premium rating for purposes of creation, renewal, or replacement; securing and servicing reinsurance; detection and investigation of fraud; coordinating or managing care; and conducting or arranging for medical review.

We may use or disclose protected health information to contact you to provide information about treatment alternatives or other health related benefits and services that may be of interest to you. Examples include but are not limited to: reminding you about preventive care or informing you about a disease management program.

St. Luke’s Health Plan may use or disclose protected health information to the extent that such use or disclosure is required by law.

St. Luke’s Health Plan may use or disclose protected health information for certain public health activities, including: to report information to the appropriate authority 
to prevent or control disease, injury or disability; to report births and deaths; to report information concerning quality, safety or effectiveness of FDA regulated products or activities; and to report recalls of products that may be in use.

St. Luke’s Health Plan may disclose protected health information concerning certain communicable diseases to certain government agencies that are authorized by law 
to receive such information. St. Luke’s Health Plan may disclose protected health information, if authorized by law, to a person who may have been exposed to a communicable disease or may otherwise be at risk of contracting or spreading the disease or condition.

We may disclose protected health information to the appropriate government agency if we believe it is related to child abuse or neglect. We may also disclose protected health information to the appropriate government agency if we believe that you have been a victim of abuse, neglect or domestic violence, to the extent such disclosure is (i) required by law, (ii) you agree, or (iii) such disclosure is expressly authorized by law and we believe disclosure is necessary to prevent serious harm to you or another victim, or you are unable to agree due to incapacity and disclosure will not be used against you and is necessary for immediate law enforcement activities.

St. Luke’s Health Plan may disclose protected health information to governmental health oversight agencies for activities authorized by law, such as audits, investigations, and inspections; provided the investigation or activity must relate to the receipt of health care, a claim for public benefits related to health or qualification for public benefits based on your health. “Health oversight activity” does not include an investigation or other activity relating to you.

We may disclose health information about you for public health purposes. Examples of public health disclosures include but are not limited to reporting vital events such as births and deaths; reporting adverse events or surveillance related to food, medications, or defects or problems with products, reporting certain communicable diseases as required by law; or notifying a person who may have been exposed to a disease or may be at risk of contracting or spreading a disease or condition.

St. Luke’s Health Plan may disclose protected health information in response to an order of a court or administrative tribunal. St. Luke’s Health Plan may also disclose protected health information in response to a subpoena, discovery request or other lawful process if satisfactory assurances are provided showing efforts have been made to inform you of the request or to obtain a protective order.

We may disclose protected health information, subject to specific limitations, for certain law enforcement purposes, including: in response to legal process or as otherwise required by law; to identify or locate a suspect, fugitive, material witness or missing person; to provide requested information about the victim of a crime; to alert law enforcement that a person may have died because of a crime.

We may disclose protected health information to a coroner or medical examiner to identify a deceased person, determine a cause of death, or permit the coroner or medical examiner to fulfill other duties authorized by law. St. Luke’s Health Plan may disclose protected health information to funeral directors as necessary to carry out their duties.

If you are an organ donor, we may use or disclose protected health information to organ procurement organizations or other entities engaged in the procurement, banking, or transplantation of cadaveric organs, eyes, or tissue.

St. Luke’s Health Plan may use or disclose protected health information for 
health research.

We may use or disclose protected health information to avert or lessen a serious threat to your health or safety or the health and safety of others.

If you are in the military, St. Luke’s Health Plan may disclose protected health information as required by military command authorities.

St. Luke’s Health Plan may disclose protected health information to authorized federal officials for lawful national security activities, and for the provision of protective services to the President and other authorized officials.

If you are an inmate or in the lawful custody of law enforcement, we may disclose protected health information if necessary for your health care, for the health and safety of others, or for the safety, security, or good order of the correctional institution.

If you are a member of a group health plan, St. Luke’s Health Plan may share information with the plan sponsor (employer) or the group health plan through which you receive health benefits. However, we will not share detailed health information with the employer sponsoring your benefit plan unless your employer agrees in writing to protect it and not use it for employment-related actions or decisions, or in connection with any other employee benefit plan.

St. Luke’s Health Plan may disclose protected health information as authorized by and to comply with workers’ compensation laws and other similar legally established programs that provide benefits for work- related injuries or illness.

St. Luke’s Health Plan may disclose protected health information to third party “business associates” who perform various activities involving protected health information (e.g., claims payment or case management services) for St. Luke’s Health Plan. St. Luke’s Health Plan will implement written contracts to ensure the business associates will appropriately safeguard the information and to limit their use or disclosure of protected health information.

St. Luke’s Health Plan may use and disclose protected health information in the following instances without your written authorization unless you object.

Unless you object, we may disclose protected health information to a member of your family, relative, close friend, or other person identified by you who is involved in your health care or the payment for your health care. The disclosure will be limited to the protected health information relevant to that person’s involvement in your health care or payment and in your best interests. If you are incapacitated or not present to agree or object to the disclosure, the disclosure will be made only if determined by professional judgment that the disclosure is relevant and in your best interests.

Unless you object, we may use or disclose protected health information to notify or assist in notifying a family member, personal representative, or other person responsible for your care of your location, general condition or death. Among other things, we may disclose protected health information to a disaster relief agency to assist in notifying family members.

Other uses and disclosures of your protected health information will be made only 
with your written authorization unless otherwise required by law. We will only disclose substance use disorder records marked as 42 CFR Part 2 protected with your written authorization. We will never share your information without your written authorization for marketing purposes or for the sale of your information. You may revoke your authorization at any time by submitting a written revocation, except to the extent that we have acted in reliance on your authorization.

You have the right to request additional restrictions on the use or disclosure of your protected health information for treatment, payment or health care operations. You must submit your request for additional restrictions in writing to the privacy contact identified below. St. Luke’s Health Plan is not required to agree to a requested restriction. If the plan provides written agreement to the restriction, it will comply with the restriction unless an emergency or the law prevents St. Luke’s Health Plan from complying with the restriction, or until the restriction is terminated.

You have the right to request that St. Luke’s Health Plan use alternative means or alternative locations for communications involving your protected health information. You must submit your request in writing to the privacy contact identified below. You will not be asked to explain the reason for your request. St. Luke’s Health Plan will accommodate all reasonable requests. St. Luke’s Health Plan may condition the accommodation on information as to how payment will be handled or specification 
of an alternative address or other method of contact.

You have the right to inspect and obtain a copy of your protected health information that is used to make decisions about Plan benefits. You may access your protected health information by submitting a written request to the privacy contact identified below. Your request will be responded to within 30 days, or 60 days in certain circumstances. You may be charged a reasonable cost- based fee for providing the records to you. Your request may be denied if you seek psychotherapy notes; information compiled in anticipation of legal proceedings; information that is protected by applicable law; and information that may result in substantial harm to you or others if disclosed. If access is denied, you will receive written denial, and you have the right to have the denial reviewed.

You have a right to request that your protected health information be amended. You may request the amendment by submitting a request in writing to the privacy contact identified below. Your request must be responded to within 60 days, or 90 days in certain circumstances. St. Luke’s Health Plan may deny your request if it did not create the record unless the originator is no longer available; if access to the record may properly be denied; or if St. Luke’s Health Plan determines that the record is accurate and complete. If St. Luke’s Health Plan denies your request, you will receive a written denial, and you have a right to submit a statement of disagreement and to have the statement attached to the record.

You have the right to request and receive an accounting of disclosures St. Luke’s Health Plan has made of your protected health information for certain purposes within the last six years provided that you may not request an accounting of disclosures before April 14, 2003. This right does not extend to disclosures made to you; for any permitted purpose including treatment, payment, or health care operations; to family members or others involved in your health care or payment; for notification purposes; or pursuant to an authorization. You have a right to receive the first accounting within a 12-month period free of charge. In certain circumstances, St. Luke’s Health Plan may temporarily suspend your right to an accounting. Generally, an accounting must include the date of disclosure, name of the entity who received the information, brief description of the information disclosed and the purpose of the disclosure. Special rules apply to accounting for multiple disclosures and research disclosures. St. Luke’s Health Plan may charge a reasonable cost-based fee for all subsequent requests during that 12-month period. You may request an accounting by submitting a written request to the privacy contact identified below.

You have the right to obtain a copy of this notice upon request. You may obtain a copy of the current notice from the privacy contact identified below or by calling the number on the back of your identification card. Even if you agree to receive the notice electronically, you still retain the right to obtain a paper copy upon request.

St. Luke’s Health Plan reserves the right to change this notice and the privacy practices of the plan covered by this notice. These changes will apply to all information we have about you. If St. Luke’s Health Plan materially changes the way it uses or discloses your protected health information, a new Notice of Privacy Practices will be prepared and made available upon request and posted on this website. We will also mail a copy to you.

These plan privacy practices were last updated on February 3, 2023.

This Notice of Privacy Practices will be followed by the St. Luke’s Health Plan.

You may raise a complaint to us or to the Secretary of Health and Human Services if you believe your privacy rights have been violated by St. Luke’s Health Plan. You may file a complaint with us by notifying our Privacy Officer identified below. St. Luke’s Health Plan will not penalize or retaliate against you for filing a complaint.

If you have any questions about this Notice of Privacy Practices for St. Luke’s Health Plan, or wish to object to or complain about any use or disclosure as explained above, please contact:

We use various 3rd Party Services to provide features on our Website that may be of value to you and collect general information about your Website visit. The information we collect is used to help us improve our Website to provide better service to you. We do not collect any personally identifiable information about you unless you choose to provide that information when using these services. We also provide easy ways for you to send us comments or questions in certain areas of the Website. We will share the information you send with St. Luke's professionals, who may be able to address your comment or question. We do not sell any information about visitors to this site.

This Website does not collect, share, or expose protected health information, which is restricted by state and federal law. This Website does provide a link that allows you to access a different, secure St. Luke's website containing your personal information as a member of St. Luke's Health Plan where protected health information is stored. Please see our Privacy Practices above for more information on how medical information about you may be used and disclosed.

While St. Luke's Health Plan diligently protects personal health information within our secure electronic health record systems, this Website and all information entered on this Website by you is public. We cannot protect any personally identifiable health or other information you choose to share when using this Website. We urge you to use caution and not disclose private information when using this Website.

Certain information is automatically collected, including:

• The IP address of the computer you are using

• The name of the domain and host from which you access the Internet

• The pages you visited

• The Internet address of the Website from which you linked to this Website

• The type of browser you are using

• The time and date you are visiting the Website

This information is not treated as personal information unless it is combined with contact, account, or similar information. We do not combine the automatically collected data with contact, account, or other information that personally identifies you.

St. Luke's Heath Plan is the sole owner of the information collected on this site. We will not sell, share, or rent this information to others in ways different from what is disclosed in this statement.

You do not have to give us personal information to visit our Website. If you choose 
to provide us with additional information about yourself through an email message, form, survey, etc., we will only maintain the information as long as needed to respond to your question or to fulfill the stated purpose of the communication. These communications are protected by the Privacy Act, which restricts our use of them, 
yet permits certain disclosures.

This Website also provides links to other websites which provide additional services to you. Examples include Provider Directory, Pharmacy Directory, and the Your Health Idaho. These websites are not governed by the Terms of Use and Website Privacy Policy of this Website. They may have their own terms and privacy policies you should review when using those websites.

This Website contains links to other sites. Please be aware that St. Luke's Health Plan is not responsible for the privacy practices of other sites. We encourage our users to be aware when they leave our site and to read the privacy statements of each and every Website that collects personally identifiable information. This privacy statement applies solely to information collected by this Website.

We may place a temporary file called a "cookie" in the storage area used by your web browser when you visit this Website. This cookie will expire when you close your web browser. The cookie does not contain personally identifiable information about you. We use it to track your path through our Website which we use in combination with other information we collect described in this policy to improve the performance and usefulness of our Website. You may limit our ability to place the cookie by adjusting the security controls in your web browser, however some features of our Website may not work properly for you.

We may revise our Website Privacy Policy periodically as we add new features or as laws change that may affect our services. Our most current Website Privacy Policy will be available on our Website, including the date it was last updated. We encourage you to periodically reread this Website Privacy Policy to see if there have been any changes that may affect you.

If you have any questions or concerns about the policies, practices, or terms in our Website Privacy Policy or Terms of Use, you may contact St. Luke's Communications and Marketing Department by telephone at 1-208-381-2348, by sending an email message to [email protected], or by contacting us through U.S. mail at: