Skip to main content

HIPAA-AS Q&A

Note: the material on this Web site is not legal advice and should not be used as legal advice. If you need legal advice, we recommend you consult your attorney.

Obtaining information from Wellmark

Call the Customer Service number on your ID card and be prepared to verify:

  • Name, address, and ID number of the contract holder. (The ID number often is the Social Security Number but not always).
  • Name and date of birth of the patient
  • Relationship to the contract holder if you are not contract holder

According to Wellmark policy, Customer Service will not release specific diagnosis or procedure information over the phone to any party - even to the individual patient. We cannot discuss issues in more detail than you provide.

Yes. We cannot discuss issues in more detail than you provide. Wellmark will not disclosure the diagnosis, types of service or treatment, the name of the clinics or facilities involved.

Call the Customer Service number on your ID card and be prepared to verify:

  • Name, address, and ID number of the contract holder. (The ID number often is the Social Security Number but not always).
  • Patient's name and date of birth
  • Relationship of the patient to the contract holder
  • Name and relationship to the patient

We cannot discuss issues in more detail than you provide. Wellmark will not disclose the diagnosis, type of service or treatment or the name of the clinicians or facilities involved. If you have this information from the patient and you can confirm the specific information related to the claim, Wellmark may further discuss the situation as long as that explanation does not involve disclosing additional protected health information for that patient.

If you want your spouse or family member to act on your behalf with respect to all your individual rights concerning your protected health information, then you may submit an authorized representative appointment form PDF File.

Yes. If the patient is present when the family members contacts Wellmark, we will accept a verbal authorization from the member to discuss the issue during that call.

An oral authorization applies only to the duration of the phone call. A written authorization signed by the patient applies for the period of time the patient indicates on the form.

It means that Wellmark is allowed to share medical information about you with a family member or government authorities without your permission in the case of a disaster, such as a flood or tornado.

You may give Wellmark written authorization to use your medical information or to disclose it to anyone for any purpose. This authorization is available in the Wellmark Notice of Privacy Practices PDF File.

We may disclose your information to a family member, friend or other person to the extent necessary to help with your health care or with payment for your health care. For example, if a family member verifies the name of the provider, the date of service and the charge amount, we will discuss the claim status, paid date and paid amount. We will not release your diagnosis or the type of procedure or service you received.

You have the right to receive a list of instances in which Wellmark disclosed your medical information for purposes other than our normal payment or health care operations. Please refer to your Notice of Privacy Practices under the section titled Disclosure Accounting for instructions on how to obtain the list.

A plan sponsor is an employer or organization that offers a group health plan to its employees or members. A plan sponsor may be a director, senior executive, or other employee who does not require access to enrollees' health information to perform their day-to-day job functions.

Typically Wellmark only releases "de-identified" or aggregate summary health information to a plan sponsor. A plan sponsor may also receive information concerning enrollment in the health plan.

For large group health plans, Wellmark may provide aggregate health information showing how the plan members have utilized the health plan. For example, a report we provide group health plans during the annual renewal period shows the total amount of covered charges submitted in claims for inpatient, outpatient, office and other health care in comparison to the same categories for the prior year.
Back to top

Wellmark privacy compliance

You may contact Wellmark's Privacy Office:

Mailing Address:
Wellmark, Inc.
Privacy Office, Station 4W777
P O Box 9232
Des Moines, IA 50306-9232

Telephone:
877-610-6395 Outside Des Moines Area
515-376-5850 Des Moines Local Area

Fax:
515-376-9032

Email:
privacyoffice@wellmark.com Send Email

  • Erection of physical barriers and electronic firewalls to safeguard protected health information (PHI)
  • Process to provide individuals with access to their PHI in a designated record sets
  • Process for individual to request an amendment to their information, request restrictions and confidential communications
  • Receipt of "authorizations" from individuals as needed
  • Process for individuals to lodge complaints, handle complaints and track complaint-resolution
  • Reporting to customers any improper use or disclosure of PHI
  • Requiring subcontractors and others to comply with HIPAA-AS privacy regulations
  • Retaining designated record sets according to applicable insurance laws?

Yes. Please see Wellmark Notice of Privacy Practices PDF File for additional information.

Yes. Please see Wellmark Notice of Privacy Practices PDF File for additional information.

Yes. Please see Wellmark Notice of Privacy Practices PDF File for additional information.

How the individual obtains the PHI depends on whether he/she is covered under a fully-insured health plan or a self-funded health plan arrangement. Please read the next two questions.

If you are enrolled in a fully insured plan:
To inspect, copy or change information: Wellmark customers will submit their requests to Wellmark. The request process is outlined in the Wellmark Notice of Privacy Practices PDF File
To request a designated record set: Wellmark customers will submit their requests to Wellmark. Wellmark will charge the member of a fully-insured health plan a cost-based fee for each request. The fee will be requested at the time the request is submitted. The request process is outlined in the Wellmark Notice of Privacy Practices PDF File

To receive an accounting of disclosures:
Customers will submit their requests to Wellmark. Wellmark will provide the first accounting in a 12-month period at no charge to the member. For each additional request, Wellmark will charge the customer a cost-based fee for each request. The fee will be required at the time the request is submitted. The request process is outlined in the Wellmark Notice of Privacy Practices PDF File

If you are in a self-insured group health plan:
The customer should contact that health plan which will have its own procedures for answering the requests. The customer may want to contact his/her Human Resources department for information.

If you receive a Notice of Privacy Practices PDF File from Wellmark, you have fully insured plan with Wellmark. You also can contact your employer's Human Resources department.
Back to top

Notice of privacy practices

Wellmark is sending its Notice of Privacy Practices to contract holders who are enrolled through fully-insured health plans, including direct-pay or Medicare Supplement plans.
Individuals enrolled in self-funded health plans will receive a Notice of Privacy Practices document from those self-funded group health plans.

Wellmark sent one copy of its Notice of Privacy Practices to each enrolled contractholder by April 14, 2003. After that, we must provide the Notice to each new contractholder upon enrollment, and Wellmark must advise its contract holders of the availability of the Notice every three years.
 
You might receive a Notice from Wellmark and a Notice from another insurance plan if your health plan benefits are provided by more than one plan.

Yes.

No.

No.
Back to top
Next: HIPAA-AS Q&A for IT Vendors
}