HIPAA Privacy Documents

For employer groups, brokers and consultants

This section is intended to provide you with helpful information and instructions regarding HIPAA's Privacy Regulations and how they impact your interactions with Tufts Health Plan.

We hope that you find this information useful and if you have any questions, please contact your Tufts Health Plan account manager, legal counsel, broker or consultant.

• Our Definitions of HIPAA-related Terms document provides you with definitions of terms in the Privacy Regulations.
• The HIPAA Privacy Regulations are extensive. To help our fully-insured and self-insured employer groups understand the regulations, Tufts Health Plan has developed a pair of summary documents - Privacy Summary for Self-insured Employer Groups and Privacy Summary for Fully-insured Employer Groups.
• We've developed certification documentation for fully-insured employer groups who wish to receive protected health information (PHI) for plan administration purposes (see Privacy Summary for Fully-insured Employer Groups for additional details). The certification documentation is to be used as a cover sheet when sending Tufts Health Plan a copy of the certification.
• Please use our Agent Documentation form to authorize Tufts Health Plan to disclose PHI for enrollment/disenrollment and summary health information for premium bidding, modifying, amending or terminating the plan to an entity performing these activities on an employer's behalf (e.g., broker or third party administrator).
• Please use our Business Associate Documentation form to authorize Tufts Health Plan to disclose PHI for plan administration purposes to an entity performing these activities on an employer's behalf (e.g., consultant or third party administrator).
• Prior to disclosing a member's PHI to a fully-insured employer - or one of their business associates - when acting on behalf of a member (e.g., to help resolve a claims issue), Tufts Health Plan requires the member to complete our Authorization to Disclose Protected Health Information. CareLink members are required to complete a CareLink Authorization to Disclose Protected Health Information. Verbal permission from the member will also be accepted. Completed forms should be faxed to Tufts Health Plan to the attention of "Employer Queue" at (617) 923-5517.
• Our Instructions for Brokers and Consultants document provides guidance regarding the way they receive PHI and what steps they may need to take.
• Feel free to review Tufts Health Plan's Notice of Privacy Practices.