Aetna reached a settlement agreement with the Attorney General’s office on Wednesday. In addition to the $935,000 payment, the insurance company agreed to implement and maintain specific mailing procedures that protect the confidentiality of medical information.
These procedures include steps to make sure medical information is not visible to third party through the envelopes. Aetna will develop training materials and implement training requirements about medical information mailing procedures. It will appoint an employee responsible for implementing and maintaining its revised mailing program, compliance with state and federal privacy laws, and management of external vendors handling medical information
Furthermore, the insurance company agreed to complete an annual privacy risk assessment for three years to determine its compliance with the terms of the settlement.
