Virtual Health
is now available for select plans! Get expert healthcare for non-emergencies.
Register todayBlueprint Portal is a members-only website that will help you understand and manage your health plan so you’re able to find quality, patient-focused healthcare at the best possible price.
“Arkansas Blue Cross and Blue Shield” is a business name for USAble Mutual Insurance Company, which also does business as BlueAdvantage Administrators of Arkansas (“BlueAdvantage”) and Skai Blue Cross and Blue Shield (“Skai Blue”), both of which are third-party administrative services divisions of the company. By law, Arkansas Blue Cross and Blue Shield and its affiliated companies, HMO Partners, Inc., d/b/a Health Advantage; USAble HMO Inc., d/b/a Arkansas Blue Medicare and d/b/a Octave Blue Cross and Blue Shield (“Octave”); and USAble PPO Insurance Company, d/b/a Arkansas Blue Medicare Plus (Arkansas Blue Medicare and Arkansas Blue Medicare Plus sometimes referred to herein collectively as “Arkansas Blue Medicare”) are required to protect the privacy of your protected health information (PHI). We also must tell you how your PHI held by us may be used and released (“disclosed”).
Throughout this notice, we will use the name “Arkansas Blue Cross” as a shorthand reference for the divisions and affiliated companies above. Please note that although we are combining this privacy notice for convenient, shorthand reference, and to make it more efficient to inform you about your privacy rights, Arkansas Blue Cross/BlueAdvantage/Skai Blue is a separate company from Health Advantage, Octave and Arkansas Blue Medicare and each company has their own operations, management and compliance responsibilities.
“Protected health information” (PHI) is health information that is created, collected, maintained, or transmitted by us that relates to an individual’s past, present, or future physical or mental condition, treatment for the condition, or payment for the treatment, and that is protected by law from impermissible disclosures. Legal protections also apply to individually identifiable non-health information stored in the same designated record set as PHI that could identify you.
Arkansas Blue Cross must disclose your PHI to provide information:
Arkansas Blue Cross has the right to disclose your PHI to evaluate and process your health plan or health insurance claims, enroll and disenroll you and your dependents, and perform related business operations. For example:
Arkansas Blue Cross may use or give out your PHI for the following purposes, under limited circumstances:
By law, Arkansas Blue Cross must have your written permission (an “authorization”) to use or release your PHI for any purpose other than treatment, payment or health care operations or other limited exceptions outlined here or in the Privacy regulation or other applicable law. Once you have given your permission for us to release your PHI you may take it back (“revoke”) at any time by giving written notice to us, except if we have already acted based on your original permission. To the extent (if any) that we maintain or receive psychotherapy notes or substance use disorder (SUD) counseling notes about you, most disclosures of these notes require your specific authorization or written consent. In addition, most (but not all) uses and disclosures of medical information for marketing purposes and disclosures that constitute a sale of PHI require your authorization. Once we disclose information to a third-party other than a health care provider, health plan, or other person subject to federal privacy laws, the information may no longer be protected by federal privacy laws, and the recipient may use or redisclose that information for other purposes.
If you have a health benefit plan issued by Arkansas Blue Cross, Health Advantage, Octave or Arkansas Blue Medicare on or after October 1, 2007, you have a Personal Health Record (PHR). Your PHR contains a summary of claims submitted for services you received while covered by your health benefit plan, as well as non-claims data you choose to enter yourself. Your PHR will continue to exist, even if you discontinue coverage under your health benefit plan. You have access to your PHR through the Arkansas Blue Cross, Health Advantage, Octave or Arkansas Blue Medicare websites. In addition, unless you limit access, your physician and other healthcare providers have access to your PHR. However, certain information that may exist in the claims records is not available to your physician and other healthcare providers automatically.
To protect your privacy, information about treatment for certain sensitive medical conditions, such as HIV/AIDS, sexually transmitted diseases, mental health, drug or alcohol abuse or family planning, will be viewable by you alone unless you choose to make this information available to the medical personnel who treat you. Similarly, non-claims data, such as your medical, family and social history, will only appear in your PHR if you choose to enter it yourself. It is important to note that you have the option to prohibit access to your PHR completely, either by electronically selecting to prohibit access or by sending a written request to prohibit access to the Privacy Office at the address below.
We are prohibited by law from collecting or using genetic information for purposes of underwriting, setting premiums, determining eligibility for benefits or applying any pre-existing condition exclusion under an insurance policy or health plan. Genetic information means not only genetic tests that you have received, but also any genetic tests of your family members, or any manifestations of a disease or disorder among your family members. Except for pre-existing condition exclusions, we may obtain and use genetic information in making a payment or denial decision or otherwise processing a claim for benefits under your health plan or insurance policy, to the extent that genetic information is relevant to the payment or denial decision or proper processing of your claim.
We cannot use or disclose information about your treatment for substance use disorders (or provide testimony based on such information) for any civil, criminal, administrative, or legislative proceedings against you. Any such disclosure is permitted only with your consent or a special type of court order, for which you must have notice and an opportunity to object, as well as a subpoena, court order, or similar legal mandate.
You have the right to:
In the event of unauthorized access to or disclosure of your PHI, we will provide you with notification of a breach as required by law or where we otherwise deem such notification appropriate.
If you would like to contact Arkansas Blue Cross or any of its divisions or affiliates for further information regarding this notice, or to exercise any of the rights described in this notice, you may do so by contacting Customer Service at the following toll-free telephone numbers:
You also may access instructions and request forms from our companies' websites:
We are required by law to abide by the terms of this notice. We reserve the right to change this notice and make the revised or changed notice effective for claims or medical information we already have about you as well as any future information we receive. When we make changes, we will notify you by sending a revised notice to the last known address we have for you or by alternative means allowed by law or regulation. We will post a copy of the current notice on Arkansas Blue Cross, Health Advantage, Octave and Arkansas Blue Medicare websites.
If you believe your privacy rights have been violated, you may file a complaint with Arkansas Blue Cross by writing to the following address:
Privacy Office
ATTN: Privacy Officer
P.O. Box 3216
Little Rock, AR 72201
Telephone: 866-254-4001
Email: [email protected]
You also may file a complaint with the Secretary of the U.S. Department of Health and Human Services. Complaints filed directly with the Secretary must:
We will not penalize or in any other way retaliate against you for filing a complaint with the Secretary or with us.
Download a printable copy of the privacy notice [pdf]
Last material revision 07/2025
Last general revision 11/2024