The insurance company agreed to pay $1.15 million to settle the investigation into the privacy breach of 2,460 New Yorkers’ HIV status.
Additionally, Aetna agreed to develop and maintain improved operating procedures to protect customers’ personal health information and personally identifiable information in mailings.
Furthermore, the insurance company agreed to hire an independent consultant to monitor and report on the settlement’s injunctive provisions.
AG Eric Schneiderman said, “Through its own carelessness, Aetna blatantly violated its promise to safeguard members’ private health information. Health insurance companies…have a fundamental responsibility to be vigilant in protecting their members. We won’t hesitate to act to ensure that insurance companies live up to their responsibilities…”
