Virginia Enrollment Broker Privacy Notice
Last Updated December 14, 2018
Maximus Commitment to Privacy
Thank you for visiting the Virginia Enrollment Broker (VA EB) Medallion Website (Site) and/or Application for mobile devices operated by Maximus Health Services, Inc. (Maximus) for the Virginia Department of Medical Assistance Services (DMAS). The Site (located at www.virginiamanagedcare.com) and Application are designed to make it easier and more efficient for you to interact with the VA EB and allow you to compare health plans, find a doctor, and enroll in a health plan. This privacy notice governs your use of the Site/Application. Please read this document carefully before you access and use the Site/Application.
Confidentiality is a top priority at Maximus. We are committed to ensuring the security and confidentiality of your information. Maximus respects your privacy and we have developed the following privacy notice to demonstrate our commitment to you.
This privacy notice applies to:
- Information we collect about you
- How we use the information
- Choices you have about how we collect and use your information
This privacy notice does not apply to:
- Privacy practices associated with any activities done outside your use of this Site/Application
- Websites other than this website
- Applications other than this application
- Products and services not available or enabled through the Site/Application
Information We Collect
In order to use some of this Site’s/Application’s features, you may be asked to provide personal information. Maximus does not collect any personal information about you through this Site/Application unless you provide that information voluntarily.
You provide personal information voluntarily when you enroll using this Site/Application. We clearly identify data you must provide so we can deliver the services or information you have requested. Maximus may ask that you provide or verify the following personal information; the list is not exhaustive:
- First and last name
- Mailing address (including ZIP/Postal code)
- County of resident
- Medicaid ID number
- Social Security Number
- Date of birth
During your visit to the Site/Application, you may complete a transaction such as an enrollment application. The information, including personal information, volunteered by you in completing the transaction is used by Maximus to operate the VA EB Medallion program, which includes the provision of goods, services, and information.
Maximus maintains policies that protect the confidentiality of personal information obtained in the course of its regular business functions. Maximus privacy policies impose a number of standards to guard the confidentiality, prohibit the unlawful disclosure, and limit access to personal information (such as Social Security Numbers and Medicaid ID numbers). Maximus safeguards personal information by having physical, technical, and administrative safeguards in place.
How We Use and Share the Information Collected
The collection of information through this Site/Application and the disclosure of that information are subject to the provisions of the Health Insurance Portability and Accountability Act (HIPAA) (Public Law 104-191). To learn more about Health Information Privacy, visit HHS.gov.
Except as we state below or as otherwise authorized by law, Maximus will only collect or disclose personal information collected through this Site/Application if you have agreed to the collection or disclosure of that personal information. Maximus may collect or disclose personal information without your agreement if it is:
- necessary to perform our statutory duties as authorized by law, or authorized by state or federal statute or regulation
- to comply with valid legal process such as a search warrant, subpoena or court order
Maximus may also disclose personal information to federal or state law enforcement authorities to enforce its rights against unauthorized access or attempted unauthorized access to Maximus information technology assets.
Maximus may disclose personal information to its agents, affiliates, and subcontractors to allow them to perform certain functions relating to your enrollment.
Maximus does not share your personal information with unaffiliated third parties. We may use your information to improve the content, navigation, and efficiency of the Site/Application.
In order to make our Site/Application better for you, we may use and share with others aggregated or anonymous (not personally identifiable) information that we have collected based on usage data, surveys, or statistical information that we have compiled about our users.
Information We Retain
Maximus retains the information collected through this Site/Application, including personal information that you submit by enrolling, as required by our contract with the Virginia DMAS. To find out more about the rules for retaining your information, please mail your questions to the contact information provided below.
Website Privacy Notice
Our web server automatically collects and logs web usage data from when you visit the Site. This information is collected for purposes related to the services we provide on behalf of the Virginia DMAS. This information, including your Internet Protocol (IP) address, referring sites, pages viewed, browser type, operating system, CPU speed, referring or exit web pages, and length of visit, informs us about how visitors use and navigate the Site. Maximus will collect the information above from your visit to the Site only for these purposes and for purposes related to the services we provide on behalf of the Virginia Department of Medical Assistance Services.
Device and Carrier Information
Through your use of the mobile application, we may collect information about your device, such as the device model, name, operating system, or TCP-IP address. We may also collect your phone number and identity of the carrier. This information will be retained by Maximus as long as needed and will only be used for the limited purposes stated within this notice.
Cookies and “Do Not Track” Signals
"Do Not Track" is a preference you can set in your web browser to let the websites you visit know that you do not want them collecting information about you. The Site/Application does not currently respond to a "Do Not Track" or similar signals.
Maximus is strongly committed to protecting personal information collected through this Site/Application against unauthorized access, use or disclosure. Maximus limits employee access to personal information collected through this Site/Application to only those employees who need access to the information in the performance of their official duties. Employees who have access to this information follow appropriate procedures in connection with any disclosures of personal information.
Maximus uses various technological and procedural security measures in order to protect the personal information we collect through the Site/Application from loss, misuse, alteration or destruction. We have documented Information Security & Privacy policies to address data protection. We regularly provide information security and privacy awareness training to our employees. However, you should be aware that, due to the open and unsecured character of the Internet, Maximus cannot be responsible for the security of transmissions of personal information over the Internet. We have prepared a formal incident response plan in case of a data breach.
To protect your communications through the Site, we authenticate, monitor, audit, and encrypt activity. You can tell when the site is secure by looking at the location (URL) field. If the URL begins with https:// (instead of http ://), the document comes from a secure server. This means your personally identifiable information cannot be read or deciphered by unauthorized individuals. This is part of our continuing commitment to protecting your information. Please note, that despite our efforts, no security measures are completely secure. Use of this system constitutes consent to such monitoring and auditing.
Maximus is committed to complying fully with the Children's Online Privacy Protection Act. The Site/Application is not directed towards children under 13 years of age, nor do we knowingly collect information from children under the age of 13. Maximus appreciates your cooperation with this federally mandated requirement.
Reviewing and Correcting Your Information
We try to keep information about you accurate and current. To change or update any personal information maintained by our program, you may write Maximus at the address below. In your correspondence, please indicate with as much detail as possible. Personal information maintained by any of our contracts administered on behalf of federal, state or local government entities should be corrected by contacting the customer service department in the individual program. Please refer to the section on “How to Contact Us”.
Information provided on this Site/Application is intended to allow the public immediate access to public information. While all attempts are made to provide accurate, current, and reliable information, Maximus recognized the possibility of human and/or mechanical error. Therefore, Maximus, its employees, officers, and agents make no representations as to the accuracy, completeness, currency, or suitability of the information provided by this Site/Application and deny any expressed or implied warranty as to the same.
Changes to this Privacy Notice
We will occasionally update this privacy notice. When we do, we will revise the "last updated" date at the top of the privacy notice. Please check the Site/Application from time to time for the most current version of our privacy notice. Your continued use of the Site/Application after we have notified you of changes as described above constitutes your acceptance of the changes.
How to Contact US
If you have any questions or concerns about reviewing and correcting your Information, please contact us by:
Toll-free phone number: 1-800-643-2273 (TTY: 1-800-817-6608).
Maximus/VA Enrollment Broker
Attn: Mail Clerk
P.O. Box 2029
Richmond, VA 23219
If you have any questions or concerns about our privacy notice, please contact us by:
Maximus Privacy Official Office
1891 Metro Center Drive
Reston, VA 20190 USA