April 25, 2022

Maximus Commitment to Privacy

Thank you for visiting the New York Medicaid Choice managed care enrollment website operated by Maximus Health Services  (“Maximus,” “We,” “Us”) for the New York State Department of Health. This website, located at https://www.nymedicaidchoice.com/?language=en, is designed to make it easier and more efficient for individuals to interact with the New York Medicaid Choice program. This privacy statement governs your use of the website. Please read this document carefully before you access and use the Site.

Consistent with the provisions of New York State’s Internet Security and Privacy Act, the Freedom of Information Law, and the Personal Privacy Protection Law, this policy describes the privacy practices regarding information collected from users of this website. This policy describes what information is collected and how that information is used. Because this privacy policy only applies to this website, you should examine the privacy policy of any website, including other state agency websites, that you access using this website.

For purposes of this policy, "personal information" means any information concerning a natural person, as opposed to a corporate entity, which, because of name, number, symbol, personal mark, or other identifier, can be used to identify that natural person. Maximus only collects personal information about you when you provide that information voluntarily by initiating an online transaction.

Confidentiality is a top priority at Maximus. We are committed to ensuring the security and confidentiality of your information. Maximus respects your privacy and we have developed the following privacy statement to demonstrate our commitment to you.

This privacy statement applies to:

• Information we collect about you
• How we use the information
• Choices you have about how we collect and use your information

This privacy statement does not apply to:

• Privacy practices associated with any activities done outside your use of this website
• Websites other than this website
• Applications other than this application
• Products and services not available or enabled through this website

 

Information Collected Automatically When You Visit This Website

 

Our web server automatically collects and logs web usage data when you visit the website. This information is collected on behalf of the New York State Department of Health. This information, including your Internet Protocol (IP) address, referring sites, pages viewed, browser type, operating system, CPU speed, referring or exit web pages, and length of visit, informs us about how visitors use and navigate the Site. None of this information is deemed to constitute personal information. This information is collected for statistical analysis, to determine what information is of most and least interest to our users, and to improve the utility of the material available on the website. The information is not collected for commercial marketing purposes and Maximus is not authorized to sell or otherwise disclose the information collected from the website for commercial marketing purposes. Maximus will collect the information above from your visit to the website only for these purposes and for purposes related to the services we provide on behalf of the New York State Department of Health.

Cookies, “Do Not Track” Signals, and Adobe Analytics

Like most websites, we employ "cookies," "Web beacons," and similar devices to help you more efficiently use the website and to track your activities. A cookie is a small amount of data that is transferred to your browser by a Web server and can only be read by the server that gave it to you. It functions as your identification card and enables Maximus to record your activities and preferences. It cannot be executed as code or deliver viruses. A Web beacon is a small transparent GIF image that is embedded in an HTML page or e-mail used to track when the page or e-mail has been viewed. Maximus uses cookies and similar devices to track your use of the website, types of Products and Services viewed, and information downloaded, and to count visitors we receive daily. Our Web servers automatically log the IP/Internet address of your computer. Maximus does not allow for the use of persistent cookies.

Our website uses Adobe Analytics. Adobe Analytics does not identify individual users or associate your IP address with any other data held by Adobe Analytics. We use reports provided by Adobe Analytics to help us understand website traffic and webpage usage. You may view the Adobe Analytics Privacy Statement located on the Adobe Privacy Center  here.

Opt-Out of Cookies and Adobe Analytics 

If you do not want your browser to accept cookies, you can modify the cookie option in your browser’s settings. However, some website features or services may not function properly or be accessible without cookies.  For additional information on opting out of Adobe Analytics tracking cookies, please see Adobe Analytics Cookie Policy here and Adobe Privacy Choices, including Opt-Out, here.

“Do Not Track”

"Do Not Track" is a preference you can set in your web browser to let websites you visit know that you do not want them collecting information about you. This website does not currently respond to a "Do Not Track" or similar signals.

Information We Collect

In order to use some of this website’s features, you may be asked to provide personal information.  For purposes of this statement, "personal information” means any information concerning a natural person which, because of name, number, symbol, mark, or other identifier, can be used to identify that natural person. Maximus does not collect any personal information about you through this website unless you provide that information voluntarily.

You provide personal information voluntarily when you enroll or check your case using this website. We clearly identify data you must provide so we can deliver the services or information you have requested. Maximus may ask that you provide or verify the following personal information; the list is not exhaustive:

• First Name
• Last Name
• Date of Birth
• NYS Benefit ID Number
• Case Number
• Email address

During your visit to the website, you may complete a transaction such as enrolling in a health plan or checking the status of your case. The information, including personal information, that you volunteer is used by Maximus to operate the New York Medicaid Choice program, which includes the provision of goods, services, and information.

Maximus maintains policies that protect the confidentiality of personal information obtained in the course of its regular business functions. Maximus privacy policies impose a number of standards to guard the confidentiality, prohibit the unlawful disclosure, and limit access to personal information (such as Social Security Numbers and Medicaid ID numbers). Maximus safeguards personal information by having physical, technical, and administrative safeguards in place.

How We Use and Share the Information Collected

Choosing to provide personal information to Maximus, whether we request it or not, constitutes consent to the collection and sharing of the information with the New York State Department of Health for the reasons you shared the information with Maximus.

Except as stated below or as otherwise authorized by law, Maximus will only collect or disclose personal information through this website if you have agreed to the collection or disclosure of that personal information. Maximus may collect or disclose personal information without your agreement if it is:

• necessary to perform our statutory duties as authorized by law, or authorized by state or federal statute or regulation
• to comply with valid legal process such as a search warrant, subpoena, or court order

Maximus may also disclose personal information to federal and/or state law enforcement authorities to enforce its rights against unauthorized access or attempted unauthorized access to Maximus information technology assets.

Maximus may disclose personal information to its agents, affiliates, and subcontractors to allow them to perform certain functions relating to your New York Medicaid Choice transaction.

Maximus does not share your personal information with unaffiliated third parties. We may use your information to improve the content, navigation, and efficiency of the website.

The collection of information through this website and the disclosure of that information are subject to the provisions of the Health Insurance Portability and Accountability Act (HIPAA) (Public Law 104-191). To learn more about Health Information Privacy, visit HHS.gov.

Further, the disclosure of information, including personal information, collected through this website is subject to the provisions of the Internet Security and Privacy Act, New York State Personal Privacy Protection Law and New York State Freedom of Information Law.  

In order to make this website better for you, we may use and share (with others) aggregated or anonymous (not personally identifiable) information that we have collected based on usage data, surveys, or statistical information that we have compiled about our users.

Information We Retain

Maximus retains the information collected through this website, including personal information that you submit when you enroll in a health plan, as required by our contract with the New York State Department of Health. To find out more about the rules for retaining your information, please mail your questions to the contact information provided below.

Security

Maximus is strongly committed to protecting personal information collected through this website against unauthorized access, use, or disclosure. Maximus limits employee access to personal information collected through this website to only those employees who need access to the information to perform their official duties. Employees who have access to this information follow appropriate procedures in connection with any disclosures of personal information.

 

Maximus uses various technological and procedural security measures in order to protect the personal information we collect through the website from loss, misuse, alteration, or destruction. We have documented Information Security & Privacy policies to address data protection. We regularly provide information security and privacy awareness training to our employees. However, you should be aware that due to the open and unsecured character of the Internet, Maximus cannot be responsible for the security of transmissions of personal information over the Internet. We have prepared a formal incident response plan in case of a data breach.

To protect your communications through the website, we authenticate, monitor, audit, and encrypt activity. You can tell when the site is secure by looking at the location (URL) field. If the URL begins with https:// (instead of http ://), the document comes from a secure server. This means your personally identifiable information cannot be read or deciphered by unauthorized individuals. This is part of our continuing commitment to protecting your information. Please note, that despite our efforts, no security measures are completely secure. Use of this system constitutes consent to such monitoring and auditing.

Web Site Time Out

For security purposes, your URL online session when using the “Enroll online” feature is set up to end after thirty (30) minutes of user inactivity.

Children

Maximus is committed to complying fully with the Children's Online Privacy Protection Act. Although parents are free to use this website on behalf of their children, we do not direct this site to children or knowingly collect personal information from children. We are pleased to work with parents and guardians to delete, from our records, personal information that a child may have disclosed improperly on this website. Maximus appreciates your cooperation with this federally mandated requirement.

Reviewing and Correcting Your Information

We try to keep information about you accurate and current.

To access and correct demographic and Medicaid eligibility information, individuals must contact their Local District Social Services office.  To access and correct information about enrolling in a health plan, individuals should call New York Medicaid Choice.

Except as otherwise provided by law, any user may submit a request to the New York State Department of Health privacy compliance officer to determine whether personal information pertaining to that user has been collected through this website. Any such request shall be made in writing and must be accompanied by reasonable proof of identity of the user. Reasonable proof of identity may include verification of a signature, inclusion of an identifier generally known only to the user, or similar appropriate identification. The address of the privacy compliance officer is:

New York State Department of Health
Corning Tower, Room 2364
Albany, New York 12237-0044

Except as otherwise provided by law, the privacy compliance officer shall, within five (5) business days of the receipt of a proper request, provide access to the personal information; deny access in writing, explaining the reasons therefore; or acknowledge the receipt of the request in writing, stating the approximate date when the request will be granted or denied, which date shall not be more than thirty (30) days from the date of the acknowledgment.

In the event that the New York State Department of Health has collected personal information pertaining to a user through the state agency website and that information is to be provided to the user pursuant to the user's request, the privacy compliance officer shall inform the user of his or her right to request that the personal information be amended or corrected under the procedures set forth in HIPAA and in Section 95 (Access to Records) of the Public Officers Law, except as otherwise provided by law.

For additional information, you may contact Maximus at the address below. Please refer to the section on “How to Contact Us”

Information Disclaimer

Information provided on this website is intended to allow the public immediate access to public information. While all attempts are made to provide accurate, current, and reliable information, Maximus recognizes the possibility of human and/or mechanical error. Therefore, Maximus, its employees, officers, and agents make no representations as to the accuracy, completeness, currency, or suitability of the information provided by this website and deny any expressed or implied warranty as to the same.

Changes to this Privacy Statement

We will occasionally update this privacy statement. When we do, we will revise the "Last Updated" date at the top of the privacy statement. Please check the website from time to time for the most current version of our privacy statement. Your continued use of the website after we have notified you of changes (as described above) constitutes your acceptance of the changes.

How to Contact Us

If you have any questions or concerns about reviewing and correcting your Information, please contact us by:

Toll-free phone number: 1-800-505-5678 (TTY: 1-888-329-1541)

 

Mail:
Maximus/New York Medicaid Choice

Attn. NYMC Call Center Department

New York Medicaid Choice

P.O. Box 5016

New York, NY 10274

 

If you have any questions or concerns about our privacy statement, please contact us by:

Email: PrivacyOfficial@Maximus.com

Mail:
Maximus Privacy Official Office
1891 Metro Center Drive
Reston, VA 20190 USA