Privacy Policy

Last Updated: January 7, 2013

Introduction

Thank you for visiting the New York Medicaid Choice managed care enrollment website operated by MAXIMUS Health Services, Inc. (“MAXIMUS”) for the New York State Department of Health. This website is designed to make it easier and more efficient for individuals to interact with the New York Medicaid Choice program. MAXIMUS recognizes that it is critical for individuals and businesses to be confident that their privacy is protected when they visit the Medicaid Choice website operated by MAXIMUS on behalf of the New York State Department of Health.

Consistent with the provisions of the Internet Security and Privacy Act, the Freedom of Information Law, and the Personal Privacy Protection Law, this policy describes MAXIMUS’s privacy practices regarding information collected from users of this website. This policy describes what information is collected and how that information is used. Because this privacy policy only applies to this website, you should examine the privacy policy of any website, including other state agency websites, that you access using this website.

For purposes of this policy, "personal information” means any information concerning a natural person which, because of name, number, symbol, mark, or other identifier, can be used to identify that natural person. MAXIMUS does not collect any personal information about you through this website unless you provide that information voluntarily by sending an email or completing an online transaction.

Information Collected Automatically When You Visit this Website

When visiting this website MAXIMUS automatically collects and logs usage data from you.  This information includes your Internet Protocol (IP) address, referring sites, pages viewed, browser type, operating system, CPU speed, referring or exit Web pages, and length of visit.  None of the foregoing information is deemed to constitute personal information.

The information that is collected automatically is used to improve this website's content and to help MAXIMUS understand how users are interacting with the website. This information is collected for statistical analysis, to determine what information is of most and least interest to our users, and to improve the utility of the material available on the website. The information is not collected for commercial marketing purposes and MAXIMUS is not authorized to sell or otherwise disclose the information collected from the website for commercial marketing purposes.

Cookies

Like most websites, we employ "cookies", "Web beacons", and similar devices to help users more efficiently use the Site and to track your activities. A cookie is small amount of data that is transferred to your browser by a Web server and can only be read by the server that gave it to you. It functions as your identification card and enables MAXIMUS to record your activities and preferences. It cannot be executed as code or deliver viruses. Cookies from MAXIMUS can only be read by MAXIMUS websites. A Web beacon is a small transparent gif image that is embedded in an HTML page or e-mail used to track when the page or e-mail has been viewed. MAXIMUS uses cookies and similar devices to track your use of the Site, types of Products and Services viewed and information downloaded, count visitors we

receive daily, and our Web servers automatically log the IP/Internet address of your computer. MAXIMUS does not generally use this information to identify you personally. If you do not want your browser to accept cookies, you can modify the cookie option in your browser’s settings. However, some Site features or services may not function properly or be accessible without cookies.

Information Collected When You E-mail this Website or Complete a Transaction

During your visit to this website you may send an e-mail to MAXIMUS. Your e-mail address and the contents of your message will be collected. The information collected is not limited to text characters and may include audio, video, and graphic information formats included in the message. Your e-mail address and the information included in your message will be used to respond to you, to address issues you identify, to improve this website, or to forward your message to another State agency for appropriate action. Your e-mail address is not collected for commercial purposes and MAXIMUS is not authorized to sell or otherwise disclose your e-mail address for commercial purposes.

During your visit to this website you may complete a transaction such as an enrollment application. The information, including personal information, volunteered by you in completing the transaction is used by MAXIMUS to operate the New York Medicaid Choice program, which include the provision of goods, services, and information. The information collected by MAXIMUS may also be disclosed to the New York State Department of Health for those purposes that may be reasonably ascertained from the nature and terms of the transaction in which the information was submitted.

Children

This website is not directed towards children under 13 years of age, nor does MAXIMUS knowingly collect personal information from children under the age of 13. Users are cautioned, however, that the collection of personal information submitted in an e-mail will be treated as though it was submitted by an adult, and may, unless exempted from access by federal or State law, be subject to public access.

Information and Choice

As noted above, MAXIMUS does not collect any personal information about you unless you provide that information voluntarily by sending an e-mail, or completing an on-line enrollment application. You may choose not to send us an e-mail or complete an on-line application. While your choice not to participate in these activities may limit your ability to receive specific services or products through this website, it will not normally have an impact on your ability to take advantage of other features of the website, including browsing or downloading information.

Disclosure of Information Collected Through This Website

The collection of information through this website and the disclosure of that information are subject to the provisions of Health Insurance Portability and Accountability Act (HIPAA) (Public Law 104-191), and the Internet Security and Privacy Act. Except as provided below or as otherwise authorized by law, MAXIMUS will only collect personal information through this website or disclose personal information collected through this website if the user has consented to the collection or disclosure of such personal information. The voluntary disclosure of personal information to MAXIMUS by the user, whether solicited or unsolicited, constitutes consent to the collection and disclosure of the information to the New York State Department of Health for the purposes for which the user disclosed the information to MAXIMUS as a contractor to the New York State Department of Health, as was reasonably ascertainable from the nature and terms of the disclosure.

However, MAXIMUS may collect or disclose personal information without consent if the collection or disclosure is: (1) necessary to perform the statutory duties of the New York State Department of Health, or necessary for MAXIMUS to operate the New York Medicaid Choice program as authorized by law, or authorized by state or federal statute or regulation; (2) made pursuant to a court order or by law; (3) for the purpose of validating the identity of the user; or (4) of information to be used solely for statistical purposes that is in a form that cannot be used to identify any particular person.

Further, the disclosure of information, including personal information, collected through this website is subject to the provisions of HIPAA, the Freedom of Information Law and the Personal Privacy Protection Law.

MAXIMIUS may also disclose personal information to federal or state law enforcement authorities to enforce its rights against unauthorized access or attempted unauthorized access to MAXIMUS information technology assets.

Retention of Information Collected Through this Website

The information collected through this website is retained by MAXIMUS in accordance with its contract with the New York State Department of Health. Information, including personal information, that you submit by sending an e-mail, or completing an on-line enrollment application is retained by MAXIMUS for six (7) years in accordance with the records retention and disposition schedule established for the records of the program unit to which you submitted the information. Information concerning these records retention and disposition schedules may be obtained through the Internet privacy policy contact listed in this policy.

Access to and Correction of Personal Information Collected Through this Website

To access and correct demographic and Medicaid eligibility information the individual must contact their Local District Social Service office.  To access and correct information about enrolling in a health plan they should call New York Medicaid Choice.

Except as otherwise provided by law, any user may submit a request to the New York State Department of Health privacy compliance officer to determine whether personal information pertaining to that user has been collected through this website. Any such request shall be made in writing and must be accompanied by reasonable proof of identity of the user. Reasonable proof of identity may include verification of a signature, inclusion of an identifier generally known only to the user, or similar appropriate identification. The address of the privacy compliance officer is:

New York State Department of Health
Corning Tower, Room 2348
Albany, New York 12237-0044

Except as otherwise provided by law, the privacy compliance officer shall, within five (5) business days of the receipt of a proper request, provide access to the personal information; deny access in writing, explaining the reasons therefore; or acknowledge the receipt of the request in writing, stating the approximate date when the request will be granted or denied, which date shall not be more than thirty

(30) days from the date of the acknowledgment.

In the event that the New York State Department of Health has collected personal information pertaining to a user through the state agency website and that information is to be provided to the user pursuant to the user's request, the privacy compliance officer shall inform the user of his or her right to request that the personal information be amended or corrected under the procedures set forth in HIPAA and in section 95 of the Public Officers Law, except as otherwise provided by law.

Confidentiality and Integrity of Personal Information Collected Through this Website

MAXIMIUS is strongly committed to protecting personal information collected through this website against unauthorized access, use or disclosure. Consequently MAXIMUS limits employee access to personal information collected through this website to only those employees who need access to the information in the performance of their official duties. Employees who have access to this information follow appropriate procedures in connection with any disclosures of personal information.

MAXIMUS has implemented commercially reasonable technical, administrative, and physical security measures to protect your personally identifiable information from unauthorized access, modification, or use. We periodically review and update security measures in light of current technologies. Please note, that despite our efforts, no security measures are completely secure.

General Disclaimer

The information provided in this privacy policy should not be construed as giving business, legal, or other advice, or warranting as fail proof, the security of information provided through this website.

Links Disclaimer

In order to provide users with certain information, this website may provide links to local, State and federal government agencies, and websites of other organizations. A link does not constitute an endorsement of the content, viewpoint, accuracy, opinions, policies, products, services, or accessibility of that website. Once you link to another website from this website, including one maintained by the State, you are subject to the terms and conditions of that website, including but not limited to its privacy policy.

Information Disclaimer

Information provided on this website is intended to allow the public immediate access to public information. While all attempts are made to provide accurate, current, and reliable information, MAXIMUS recognizes the possibility of human and/or mechanical error. Therefore, MAXIMUS, its employees, officers and agents make no representations as to the accuracy, completeness, currency, or suitability of the information provided by this website, and deny any expressed or implied warranty as to the same.

Changes to this Privacy Policy

We will occasionally update this privacy policy. When we do, we will also revise the "last updated" date at the top of the privacy policy. Please check the Site from time to time for the most current version of our privacy policy. Your continued use of the Site after we have notified you of changes as described above constitutes your acceptance of the changes.

Contact Information

For questions regarding this Internet privacy policy, please contact:

via e-mail:

privacyofficial@maximus.com

via Mail:

Privacy Office

MAXIMUS, Inc.

1891 Metro Center Drive

Reston, VA 20190