Code of Conduct: Integrity Standard - Confidentiality of Information Q&A

A: Improper uses and disclosures can invade someone’s privacy, damage his or her reputation, cause embarrassment, violate federal and state privacy laws and invite lawsuits. Improper uses and disclosures may also be violations of the Company’s agreement or contract with a government agency or another customer. Federal and state privacy laws carry significant penalties for violations.  These penalties apply both on a corporate and individual basis.  Therefore, the privacy and confidentiality of each Covered Person’s medical and claim information must be protected in accordance with Company and department policies and procedures

A: All of our information security mechanisms use user IDs and passwords to authenticate an individual’s identity and establish approved access and rights.  If multiple individuals have access to the same user IDs and passwords, it is impossible to tell who did what.  Sharing of user IDs and passwords is strictly prohibited.  Every employee is responsible for the confidentiality of his or her user ID, password and other personal security codes, and will be held accountable for anything done with his or her user ID and password.
Corporate documents and files must be stored and secured on corporate servers in order to ensure both their recoverability as well as access by the proper individuals.  Whenever it is necessary for an Information Technology technician to work on a computer, the employee must be present to enter his or her password and provide oversight.
 

Remember, if you do not understand, or if you have any questions concerning, this Integrity Standard or any other part of the Code, contact your Supervisor, a higher level Supervisor, any of the Corporate Resources or call the Corporate Integrity HOTLINE (1 800 838-2552).

Integrity Standard - Confidentiality of Information