Important Legislative Notices WOMEN’S HEALTH CANCER RIGHTS ACT (WHCRA) If you have had or are going to have a mastectomy, you may be entitled to certain benefits under the Women’s Health and Cancer Rights Act of 1998 (WHCRA). For individuals receiving mastectomyrelated benefits, coverage will be provided in a manner determined in consultation with attending physician and the patient, for: All stages of reconstruction of breast on which the mastectomy was performed; Surgery and reconstruction of the other breast to produce a symmetrical appearance; Prostheses; and Treatment of physical complications of the mastectomy, including lymphedema. These benefits will be provided subject to the same deductibles and coinsurance applicable to other medical and surgical benefits provided under this plan. If you would like more information on WHCRA benefits, call your plan administrator at 855-858-3740. HIPAA AND MEDICAID/SCHIP SPECIAL ENROLLMENT RIGHTS NOTICE Loss of other coverage: If you decline enrollment for yourself or for an eligible dependent (including your spouse) while other health insurance or group health plan coverage is in effect, you may be able to enroll yourself and your dependents in this plan if you or your dependents lose eligibility for that other coverage (or if the employer stops contributing toward your or your dependents' other coverage). However, you must request enrollment within 30 days after your or your dependents' other coverage ends (or after the employer stops contributing towards the other coverage). Loss of Medicaid or SCHIP coverage: If you decline enrollment for yourself or for an eligible dependent (including your spouse) while Medicaid coverage or coverage under a state children's health insurance program is in effect, you may be able to enroll yourself and your dependents in this plan if you or your dependents lose eligibility for that other coverage. However, you must request enrollment within 60 days after your or your dependents' coverage ends under Medicaid or a state children’s health insurance program. New dependent: If you have a new dependent as a result of marriage, birth, adoption, or placement for adoption, you may be able to enroll yourself and your new dependents. However, you must request enrollment within 30 days after the marriage, birth, adoption, or placement for adoption. Eligibility for Medicaid or SCHIP premium assistance: If you or your dependents (including your spouse) become eligible for a state premium assistance subsidy from Medicaid or through a state children's health insurance program with respect to coverage under this plan, you may be able to enroll yourself and your dependents in this plan. However, you must request enrollment within 60 days after your or your dependents’ determination of eligibility for such assistance. MEDICARE PART D Note: you will receive the Medicare Creditable coverage notice of prescription benefits, indicating that the PPO plans and the Choice Care Plans are creditable. If you or your dependents are Medicare eligible and you did not receive this form or if you have further questions, please contact your HR representative. Premium Assistance Under Medicaid and the Children’s Health Insurance Program (CHIP) If you or your children are eligible for Medicaid or CHIP and you are eligible for health coverage from your employer, your State may have a premium assistance program that can help pay for coverage. These States use funds from their Medicaid or CHIP programs to help people who are eligible for these programs, but also have access to health insurance through their employer. If you or your children are not eligible for Medicaid or CHIP, you will not be eligible for these premium assistance programs. If you or your dependents are already enrolled in Medicaid or CHIP and you live in a State listed below, you can contact your State Medicaid or CHIP office to find out if premium assistance is available. If you or your dependents are NOT currently enrolled in Medicaid or CHIP, and you think you or any of your dependents might be eligible for either of these programs, you can contact your State Medicaid or CHIP office or dial 1-877-KIDS NOW or www.insurekidsnow.gov to find out how to apply. If you qualify, you can ask the State if it has a program that might help you pay the premiums for an employer-sponsored plan. Once it is determined that you or your dependents are eligible for premium assistance under Medicaid or CHIP, as well as eligible under your employer plan, your employer must permit you to enroll in your employer plan if you are not already enrolled. This is called a “special enrollment” opportunity, and you must request coverage within 60 days of being determined eligible for premium assistance. If you have questions about enrolling in your employer plan, you can contact the Department of Labor electronically at www.askebsa.dol.gov or by calling toll-free 1-866-444-EBSA (3272). If you live in one of the following States, you may be eligible for assistance paying your employer health plan premiums. The following list of States is current as of July 31, 2013. You should contact your State for further information on eligibility – ALABAMA – Medicaid COLORADO – Medicaid Website: http://www.medicaid.alabama.gov Phone: 1-855-692-5447 Medicaid Website: http://www.colorado.gov/ Medicaid Phone (In state): 1-800-866-3513 Medicaid Phone (Out of state): 1-800-221-3943 ALASKA – Medicaid Website: http://health.hss.state.ak.us/dpa/programs/medicaid/ Phone (Outside of Anchorage): 1-888-318-8890 Phone (Anchorage): 907-269-6529 ARIZONA – CHIP FLORIDA – Medicaid Website: http://www.azahcccs.gov/applicants Phone (Outside of Maricopa County): 1-877-764-5437 Phone (Maricopa County): 602-417-5437 Website: https://www.flmedicaidtplrecovery.com/ Phone: 1-877-357-3268 GEORGIA – Medicaid Website: http://dch.georgia.gov/ Click on Programs, then Medicaid, then Health Insurance Premium Payment (HIPP) Phone: 1-800-869-1150 2 IDAHO – Medicaid and CHIP MONTANA – Medicaid Medicaid Website: www.accesstohealthinsurance.idaho.gov Website: http://medicaidprovider.hhs.mt.gov/clientpages/ clientindex.shtml Medicaid Phone: 1-800-926-2588 Phone: 1-800-694-3084 CHIP Website: www.medicaid.idaho.gov CHIP Phone: 1-800-926-2588 INDIANA – Medicaid NEBRASKA – Medicaid Website: http://www.in.gov/fssa Website: www.ACCESSNebraska.ne.gov Phone: 1-800-889-9949 IOWA – Medicaid Phone: 1-800-383-4278 NEVADA – Medicaid Website: www.dhs.state.ia.us/hipp/ Medicaid Website: http://dwss.nv.gov/ Phone: 1-888-346-9562 KANSAS – Medicaid Medicaid Phone: 1-800-992-0900 Website: http://www.kdheks.gov/hcf/ Phone: 1-800-792-4884 KENTUCKY – Medicaid NEW HAMPSHIRE – Medicaid Website: http://chfs.ky.gov/dms/default.htm Website: http://www.dhhs.nh.gov/oii/documents/hippapp.pdf Phone: 1-800-635-2570 Phone: 603-271-5218 NEW JERSEY – Medicaid and CHIP LOUISIANA – Medicaid Website: http://www.lahipp.dhh.louisiana.gov Medicaid Website: http://www.state.nj.us/humanservices/ dmahs/clients/medicaid/ Phone: 1-888-695-2447 MAINE – Medicaid Medicaid Phone: 609-631-2392 Website: http://www.maine.gov/dhhs/ofi/publicassistance/index.html CHIP Website: http://www.njfamilycare.org/index.html CHIP Phone: 1-800-701-0710 Phone: 1-800-977-6740 TTY 1-800-977-6741 MASSACHUSETTS – Medicaid and CHIP NEW YORK – Medicaid Website: http://www.mass.gov/MassHealth Website: http://www.nyhealth.gov/health_care/medicaid/ Phone: 1-800-462-1120 Phone: 1-800-541-2831 NORTH CAROLINA – Medicaid MINNESOTA – Medicaid Website: http://www.dhs.state.mn.us/ Click on Health Care, then Medical Assistance Website: http://www.ncdhhs.gov/dma Phone: 919-855-4100 Phone: 1-800-657-3629 MISSOURI – Medicaid NORTH DAKOTA – Medicaid Website: http://www.dss.mo.gov/mhd/participants/pages/hipp.htm Website: http://www.nd.gov/dhs/services/medicalserv/medicaid/ Phone: 573-751-2005 Phone: 1-800-755-2604 3 OKLAHOMA – Medicaid and CHIP UTAH – Medicaid and CHIP Website: http://www.insureoklahoma.org Website: http://health.utah.gov/upp Phone: 1-888-365-3742 OREGON – Medicaid and CHIP Phone: 1-866-435-7414 VERMONT– Medicaid Website: http://www.oregonhealthykids.gov http://www.hijossaludablesoregon.gov Website: http://www.greenmountaincare.org/ Phone: 1-800-250-8427 Phone: 1-800-699-9075 PENNSYLVANIA – Medicaid VIRGINIA – Medicaid and CHIP Website: http://www.dpw.state.pa.us/hipp Phone: 1-800-692-7462 Medicaid Website: http://www.dmas.virginia.gov/rcpHIPP.htm Medicaid Phone: 1-800-432-5924 CHIP Website: http://www.famis.org/ CHIP Phone: 1-866-873-2647 WASHINGTON – Medicaid RHODE ISLAND – Medicaid Website: www.ohhs.ri.gov Phone: 401-462-5300 Website: http://hrsa.dshs.wa.gov/premiumpymt/Apply.shtm SOUTH CAROLINA – Medicaid Phone: 1-800-562-3022 ext. 15473 WEST VIRGINIA – Medicaid Website: http://www.scdhhs.gov Website: www.dhhr.wv.gov/bms/ Phone: 1-877-598-5820, HMS Third Party Liability Phone: 1-888-549-0820 SOUTH DAKOTA - Medicaid WISCONSIN – Medicaid Website: http://dss.sd.gov Phone: 1-888-828-0059 Website: http://www.badgercareplus.org/pubs/p10095.htm TEXAS – Medicaid Phone: 1-800-362-3002 WYOMING – Medicaid Website: https://www.gethipptexas.com/ Website: http://health.wyo.gov/healthcarefin/equalitycare Phone: 1-800-440-0493 Phone: 307-777-7531 To see if any more States have added a premium assistance program since July 31, 2013, or for more information on special enrollment rights, you can contact either: U.S. Department of Labor Employee Benefits Security Administration www.dol.gov/ebsa 1-866-444-EBSA (3272) U.S. Department of Health and Human Services Centers for Medicare & Medicaid Services www.cms.hhs.gov 1-877-267-2323, Menu Option 4, Ext. 61565 OMB Control Number 1210-0137 (expires 09/30/2013) 4 HIPAA Privacy Notice This notice describes how medical information about you may be used and disclosed and how you can obtain access to this information. Please review it carefully. The following information is effective as of September 1, 2013. The Day & Zimmermann Flexible Benefits Plan (“The Plan”) is required by law to take reasonable steps to ensure the privacy of your personally identifiable health information and to inform you about the following: The Plan’s use and disclosure of Protected Health Information (“PHI”); Your privacy rights with respect to your PHI; Your right to file a complaint with the Plan and to the Secretary of the US Department of Health and Human Services; and The person or office to contact for further information about the Plan’s privacy practices. The term Protected Health Information (“PHI”) includes all individually identifiable health information transmitted or maintained by the Plan, regardless of form (oral, written, electronic). Please note that Day & Zimmermann makes every effort to minimize the receipt of PHI. Section 1 – Notice of PHI Uses and Disclosures Required PHI Uses And Disclosures Upon your request, the Plan is required to give you access to certain PHI in order for you to inspect and copy it. Use and disclosure of your PHI may be required by the Secretary of the Department of Health and Human Services to investigate or determine the Plan’s compliance with the privacy regulations. Uses and disclosures for which consent, authorization or opportunity to object is not required The Plan will use PHI without your authorization for purposes exclusively related to payment and health care operations, where required by law or in certain other limited situations as outlined below. The Plan will also disclose PHI to the Day & Zimmermann Group, Inc., the Plan Sponsor, for purposes related to payment and health care operations. The following categories describe the different ways in which the plan may use and disclose your PHI without your consent or authorization. Please note that every permitted use or disclosure of your PHI is not listed below. However, the different ways the Plan will, or might, use or disclose your PHI do fall within one of the permitted categories described below. Payment: The Plan may use and disclose your PHI for all payment activities including, but not limited to, actions to make coverage determinations and payment (including billing, claims management, subrogation, plan reimbursement, reviews for medical necessity and appropriateness of care and utilization review and preauthorization). Health Care Operations: The Plan may use and disclose your PHI to conduct and support business and management activities including, but are not limited to, quality assessment and improvement, underwriting, developing premium rates, and other insurance activities relating to creating or renewing insurance contracts. It also includes conducting or arranging for medical review, legal services and auditing functions including fraud and abuse compliance programs, business planning and development, business management and general administrative activities. However, we will not use your genetic information for underwriting purposes. Required by Law: The Plan may disclose your PHI when required to do so by law. For example, the law requires the plan to disclose your PHI: When required by the Secretary of the U.S. Department of Health and Human Services to investigate the 5 plan compliance efforts; and To health oversight agencies, to allow them to conduct audits and investigations of the health care system, to determine eligibility for government programs, to determine compliance with government program standards, and for certain civil rights enforcement actions. Public Health Activities: The Plan may disclose your PHI to public health agencies for public health activities that are permitted or required by law, such as to: prevent or control disease, injury or disability; maintain vital records, such as births and deaths; notify individuals if a product or device they may be using has been recalled; and notify a person about potential exposure to communicable disease Health Oversight Activities: The Plan may disclose your PHI to a health oversight agency for activities authorized by law, such as: audits; investigations; inspections; licensure or disciplinary actions; or civil, administrative, or criminal proceedings or actions. Health Oversight agencies seeking this information include government agencies that oversee: (i) the health care system; (ii) government benefit programs; (iii) other government regulatory programs; and (iv) compliance with civil rights laws. Lawsuits and Other Legal Disputes: The Plan may disclose your PHI in response to a court or administrative order, subpoena, discovery request, or other lawful process once all administrative requirements of the HIPAA Privacy Rules have been met. Law Enforcement: The Plan may disclose your PHI to law enforcement officials under certain conditions. For example, PHI may be disclosed to permit identification and location of witnesses, victims, and fugitives or in response to a search warrant or court order. Coroners, Medical Examiners, or Funeral Directors: The Plan may disclose your PHI to a coroner or medical examiner for the purpose of identifying a deceased person, determining a cause of death or other duties as authorized by law. Also, disclosure is permitted to funeral directors, consistent with applicable law, as necessary to carry out their duties with respect to the decedent. To Prevent a Serious Threat to Health or Safety: As permitted by law, the Plan may disclose your PHI if the Plan believes the disclosure is necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public. Workers’ Compensation: As part of your workers’ compensation claim, the Plan may need to disclose your PHI to a worker’s compensation carrier. Uses and disclosures that require your written authorization Your written authorization will be obtained before the Plan uses or discloses PHI that is not described above. You may give us written authorization permitting us to use your PHI or disclose it to anyone for any purpose. We will obtain your written authorization for uses and disclosures of your PHI that are not identified by this Notice, or are not otherwise permitted by applicable law. For example, in general and subject to specific conditions, we will not use or disclose your psychiatric notes; we will not use or disclose your PHI for marketing; and we will not sell your PHI, unless you give us a written authorization. Uses and disclosures that require that you be given an opportunity to agree or disagree prior to the use or release Disclosure of your PHI to family members, other relatives and your close personal friends is allowed if: The information is directly relevant to the family or friend’s involvement with your care or payment for that care; and You have either agreed to the disclosure or have been given an opportunity to object and have not objected. 6 Section 2 – Rights of Individuals Right to request Restrictions on PHI Uses and Disclosures You may request the Plan restrict uses and disclosures of your PHI to carry out treatment, payment, or health care operations, or to restrict uses and disclosures to family members, relatives, friends or other persons identified by you who are involved in your care or payment for your care. However, the Plan is not required to agree to your request. In addition, you have the right to restrict disclosure of PHI to the health plan for payment or healthcare operations (but not for carrying out treatment) in situations where you have paid the healthcare provider out-of-pocket in full. In this case, the Plan is required to implement the restrictions that you request. The Plan will accommodate reasonable requests to receive communications of PHI by alternative means or at alternative locations. You or your personal representative will be required to complete a form to request restrictions on uses and disclosures of PHI. Such requests should be made to the Benefits Director. Right To Inspect And Copy PHI You have a right to inspect and obtain a copy of your PHI contained in a “designated record set,” for as long as the Plan maintains the PHI, including your PHI maintained in an electronic format. If your PHI is available in an electronic format, you may request access electronically and that this be transmitted directly to someone you designate. “Protected Health Information” (PHI) includes all individually identifiable health information transmitted or maintained by the Plan, regardless of form. “Designated Record Set” includes the medical records and billing records about individuals that are maintained by or for a covered health care provider; enrollment, payment, billing, claims adjudication and case or medical management record systems maintained by or for a health plan; or other information used in whole or in part by or for the covered entity to make decisions about individuals. Information used for quality control or peer review analyses and not used to make decisions about individuals is not in the designated record set. The requested information will be provided within 30 days if the information is maintained on site or within 60 days if the information is maintained offsite. A single 30-day extension is allowed if the Plan is unable to comply with the deadline. You or your personal representative will be required to complete a form to request access to the PHI in your designated record set. Requests for access to PHI should be made to the Benefits Director. If access is denied, you or your personal representative will be provided with a written denial setting forth the basis for the denial, a description of how you may exercise those review rights and a description of how you may file a complaint to the Secretary of the U.S. Department of Health and Human Services. Please note that the Plan Sponsor is only responsible for supplying data that it keeps on file. The Plan Sponsor is not responsible for supplying data that is kept by the claims payer or by your provider. Right to Amend PHI You have the right to request the Plan amend your PHI if you believe there is a mistake in your PHI, or that important information is missing. Requests for amendment of PHI should be made to the Benefits Director. Your request for amending a record must be made in writing and must include the reason for making the amendment. The Plan has 60 days after the request is made to act on the request. A single 30-day extension is allowed if the Plan is unable to comply with the deadline. If the request is denied in whole or part, the Plan must provide you with a written denial that explains the basis for the denial. You or your personal representative may then 7 submit a written statement disagreeing with the denial and have that statement included with any future disclosures of your PHI. Right to Receive an Accounting of PHI Disclosures At your request, the Plan will also provide you with an accounting of disclosures by the Plan of your PHI, including a disclosure involving an electronic health record, during the six years (three years in the case of a disclosure involving an electronic health record) prior to the date of your request. However, such accounting need not include PHI disclosures made: to carry out treatment, payment, or health care operations (Note: does not apply to electronic health records); to individuals about their own PHI; or prior to either the compliance date (April 14, 2004) or the date you became a participant in the Plan. In addition, you have the right to receive reports of any security incidents that the Employer becomes aware of that is required under the Security Rules. If the accounting cannot be provided within 60 days, an additional 30 days is allowed if the individual is given a written statement of the reasons for the delay and the date by which the accounting will be provided. If you request more than one accounting within a 12-month period, the Plan may charge a reasonable, costbased fee for each subsequent accounting. Right To Receive A Paper Copy Of This Notice Upon Request To obtain a paper copy of this Notice contact your Human Resources representative. A Note about Personal Representatives At your request, the Plan will disclose your PHI to someone who is qualified to act as your personal representative. Your personal representative will be required to produce evidence of his/her authority to act on your behalf before that person will be given access to your PHI. Proof of such authority may take one of the following forms: a power of attorney for health care purposes, notarized by a notary public; or a court order of appointment of the person as the conservator or guardian of the individual; or an individual who is the parent of a minor child. The Plan retains discretion to deny access of your PHI to a personal representative when the plan has a reasonable belief that you may be subject to abuse or neglect by the person, treating the person as your personal representative could endanger you or, in the Plans professional judgment, it is not in your best interest to treat the person as your personal representative. This also applies to personal representatives of minors. Section 3 – The Plan’s Duties The Plan is required by law to maintain the privacy of PHI and to provide plan participants with notice of its legal duties and privacy practices. The Plan is required to comply with the terms of this notice. However, the Plan reserves the right to change its privacy and security practices and to apply the changes to any PHI received or maintained by the Plan prior to that date. If a privacy practice is changed, a revised version of this notice will be provided to plan participants. Any revised version of this notice will be distributed within 60 days of the effective date of any material change to the uses or disclosures, the individual’s rights, the duties of the Plan or other privacy practices stated in this notice. 8 Minimum Necessary Standard When using or disclosing PHI or when requesting PHI from another covered entity, the Plan will make reasonable efforts not to use, disclose, or request more than the minimum amount of PHI necessary to accomplish the intended purpose, taking into consideration practical and technological limitations. However, the minimum necessary standard will not apply in the following situations: uses or disclosures made to the individual; uses or disclosures made to the Secretary of the U.S. Department of Health and Human Services; uses or disclosures that are required by law; and uses or disclosures that are required for the Plan’s compliance with legal regulations. This notice does not apply to information that has been de-identified. De-identified information is information that does not identify an individual and with respect to which there is no reasonable basis to believe that the information can be used to identify an individual is not individually identifiable health information. In addition, the Plan may use or disclose “summary health information” to the plan sponsor for obtaining premium bids or modifying, amending or terminating the group health plan. Summary Health Information may include claims history, claims expenses or type of claims experienced by individuals for whom a plan sponsor has provided health benefits under a group health plan, and from which identifying information has been deleted in accordance with HIPAA. BREACH OF UNSECURED PHI You must be notified in the event of a breach of unsecured PHI. A “breach” is the acquisition, access, use, or disclosure of PHI in a manner that compromises the security or privacy of the PHI. PHI is considered compromised when the breach poses a significant risk of financial harm, damage to your reputation, or other harm to you. This does not include good faith or inadvertent disclosures or when there is no reasonable way to retain the information. You must receive a notice of the breach as soon as possible and no later than 60 days after the discovery of the breach. Section 4 – Your Right to file a Complaint with the Plan or the HHS Secretary If you believe that your privacy rights have been violated, you may complain to the Plan Sponsor in care of the Day & Zimmermann Benefits Director, 1500 Spring Garden Street, Philadelphia, PA 19130. You may file a complaint with the Office for Civil Rights of the U.S. Department of Health and Human Services, 150 S. Independence Mall West, Suite 372, Public Ledger Building, Philadelphia, PA 19106. The Plan will not retaliate against you for filing a complaint. Section 5 – Whom to Contact at the Plan for More Information If you have any question regarding this notice or the subjects addressed within it, you may contact Day & Zimmermann, Plan Administrator Benefits Department, 1500 Spring Garden Street, Philadelphia, PA 19130. Conclusion PHI use and disclosure by the Plan is regulated by a federal law known as HIPAA (the Health Insurance Portability and Accountability Act). You may find these rules at 45 Code of Federal Regulations Parts 160 and 164. This notice attempts to summarize the regulations. The regulations will supersede any discrepancy between the information in this notice and the regulations. 9