We will not be taking calls on Thursday, November 28, due to the holiday.
The Medicaid Call Center will be closed on Thursday, November 28.
We will not be taking calls on Thursday, November 28, due to the holiday.
As an active BCBSND member, we are required to provide you access to your health history data through a “Patient Access API.” To access your data, you can choose from a variety of applications (apps) on your smart phone, tablet, computer or other device.
Patient Access API data includes personal information collected while you were enrolled in certain lines of business since January 1, 2016. The data remains for as long as we maintain it in our records.
Data includes:
Your health data may include very sensitive information about substance use disorder treatment, mental health treatment, HIV status or other personal information.
It’s important to understand the app you choose will have access to all your information. App are not subject to HIPAA Rules and other privacy laws that protect your health information. Instead, the app’s self-imposed privacy policy describes how it will use, disclose and (possibly) sell your data. You should be careful to choose an app the protects your data with strong privacy and security standards.
If you decide to access your information through the Patient Access API, carefully review the app’s privacy policy to ensure you’re comfortable with how they use your information.
BCBSND requests that app developers attest to having privacy and security policies. If they do not, we will notify the member before releasing his/her information.
When selecting an app, consider:
If the app’s privacy policy does not satisfactorily answer these questions, you may wish to reconsider.
If you are a parent or guardian of a minor under age 12, an active health care power of attorney, or court ordered guardianship, we need to collect more information before processing your request. Please stop and call 844-363-8457 after December 1 so we can assist you with your request.
For all other scenarios, including covered 12- to 18-year-olds, members will need to create their own account to connect their data.
Covered entities and HIPAA enforcement
The U.S. Department of Health and Human Services’ Office for Civil Rights (OCR) enforces HIPAA Privacy, Security and Breach Notification Rules. BCBSND is subject to HIPAA, as are most health care providers, such as hospitals, doctors, clinics and dentists.
Get more information about your HIPAA rights and who is obligated to comply:
https://www.hhs.gov/hipaa/for-individuals/index.html.
Learn about filing a complaint with OCR related to HIPAA requirements:
https://www.hhs.gov/hipaa/filing-a-complaint/index.html.
You may also file a complaint with BCBSND by contacting the Customer Contact Center at 844-363-8457.
Apps and privacy enforcement
An app generally will not be subject to HIPAA. An app that publishes a privacy notice is required to follow the terms of its notice, but generally is not subject to other privacy laws. The Federal Trade Commission (FTC) Act protects against deceptive acts (such as an app that discloses personal data in violation of its privacy notice).
An app that violates its own privacy terms is subject to FTC jurisdiction. The FTC provides consumers information about mobile app privacy and security here: https://www.consumer.ftc.gov/articles/0018-understanding-mobile-apps.
If you believe an app inappropriately used, disclosed or sold your data, contact the FTC. You may file a complaint by using the FTC complaint assistant: https://www.ftccomplaintassistant.gov/#crnt&panel1-1.
Application developer information
If you are an application developer looking to access the BCBSND API, visit https://apiportal.bcbsnd.com/ assistant: https://www.ftccomplaintassistant.gov/#crnt&panel1-1.