WELLPATH’S PRIVACY POLICY

Wellpath requires that all Users of the ERMA services comply with the following privacy policy ("Privacy Policy"). This policy refers only to the information collected and maintained from/in ERMA.

For the purpose of this Privacy Policy, the following definitions describe the types of Users who may access and use the information, products and services offered by Wellpath ERMA:

An Individual is any person using or accessing sections of Wellpath ERMA.

A Provider is a physician, facility, group practice and/or their authorized representatives that may access Wellpath’s products or services available through Wellpath ERMA.

A Registered User is any User or Provider authorized to enter the secure sections of Wellpath ERMA.

USING THIS SOFTWARE APPLICATION CONFIRMS YOUR CONSENT AND AGREEMENT TO OUR PRIVACY POLICY, INCLUDING COLLECTION, USE AND DISCLOSURE OF INFORMATION BY WELLPATH AS DESCRIBED HEREIN. YOUR USAGE ALSO SIGNIFIES YOUR COMPLIANCE WITH OUR APPLICABLE LICENSE AND USAGE AGREEMENT.

Wellpath, through its products and services available to correctional institutions, provides private and secure access to the Wellpath ERMA (“ERMA”) for health care providers (Providers) and other users (Registered Users).  In addition, Wellpath provides private and secure access to patient information.

Registered Users

Providers and Users must register to access the secure areas of ERMA. Privacy and Security are top priorities at Wellpath.  For that reason, Wellpath has implemented a process that helps protect Protected Health Information (PHI), as that term is defined by the Health Insurance Portability & Accountability Act of 1996 (HIPAA 45 C.F.R. § 160 &164), contained on our site from inappropriate access.  Before a User can access medical information available on our site, the User must first register at ERMA, and obtain User login information.  Before Providers can gain access to medical information available on our site, the Provider must first register and establish a log-in user name and password. 


Information Collected During Registration

Before gaining access to ERMA services Wellpath may ask for personal information (such as date of birth, member number, social security number, name, address with zip code, telephone number and e-mail address) to verify appropriate usage. Wellpath, its employees or affiliates will not have access to your password that you create.

Disclosure of Non-Public Personal Information, including PHI

We restrict access to nonpublic personal information, including PHI. Information may be shared with entities (i.e. providers and vendors) that assist Wellpath in providing services to our Registered Users. Information is provided to nonaffiliated third parties as required or allowed by federal and state law. Wellpath maintains physical, electronic, and procedural safeguards that comply with federal regulations to guard nonpublic personal information.

Disclosure to Third Parties :  Wellpath operations and maintenance employees and contractors sometimes have limited access to your nonpublic personal information, including PHI, while providing products or services to Wellpath. These contractors include vendors and suppliers that provide us with technology, services, and/or content for the operation and maintenance of our Web site.  Access to nonpublic personal information, including PHI, by these contractors is limited to the information reasonably necessary for the contractor to perform its limited function for Wellpath.

Retention of Information Collected

The non-public personal information collected and maintained from this web site will be retained for the entire contract period outlined in the License and Usage Agreement.

Security

Only employees who need the information to perform their jobs are granted access to personally identifiable information. The servers that store personally identifiable information are kept in a secure environment.

Despite our efforts to protect nonpublic personal information, including PHI, there is always some risk that an unauthorized third party may illegally gain access to systems or that transmissions of information over the Internet may be intercepted.  If you believe someone has accessed information without authorization, please contact Wellpath immediately at 1-800-592-2974.

Wellpath Reserves the Right To Modify Its Privacy Policy

Wellpath reserves the right to change or update this Privacy Policy at any time. Any changes made to our privacy policy will be posted on this site in a manner that is easily identifiable. Please review our privacy policy on a regular basis to review any changes.