MAXIMUS Privacy Policy

Last Updated: 12/24/2013

 

Our Commitment to Privacy

Thank you for visiting the Independent Review Organization (IRO) web site for Medical Necessity case review, operated by MAXIMUS Federal Services (MAXIMUS) on behalf of the Maryland Department of Health (MDH), Office of Health Services.

This web site, located at mdiro.maximus.com provides Maryland health care providers 24/7 access to a self-service portal. This portal allows providers to submit a request for independent review of a medical necessity claim that has been denied by a Managed Care Organization (MCO). The portal also allows MCOs to upload and submit Case File documentation associated with the claim denial. In addition, the portal gives all parties associated with the appeal the ability to review the IRO decision once it has been made.

MAXIMUS respects your privacy and we have developed the following policy to demonstrate our commitment to you.

This policy applies to:

  • Information we collect about you and how we use it
  • Choices you have about how we collect and use your information

This policy does not apply to:

  • Privacy practices associated with any activities done outside your use of this web site
  • Web sites other than this web site
  • Products and services not available or enabled through the web site

Information We Collect and How We Use It

In order to use some of our web site's features, such as submitting a request for review (also referred to as a "case"), you may be asked to provide or verify personal and business information.

You provide this personal and business information voluntarily when you:

  • Communicate with the web site or MAXIMUS
  • Register online using the web site
  • Update contact information – address, telephone numbers and e-mail addresses
  • View case data

We clearly identify data you must provide so we can deliver the services or information you request. MAXIMUS may ask that you provide or verify the following personal and business sensitive information:

  • First and last name
  • Mailing address
  • Telephone number
  • E-mail address
  • FEIN or Tax Identification Number (Tax ID)
  • Medicaid Number

It is your choice whether to give us this information. If you choose not to provide it, the independent case review service will not be available to you.

Our web site servers automatically collect and record web site usage data from you when you visit the web site for purposes related to the services we provide on behalf of MDH. If you browse or download information while on the web site, we will keep:

  • Your Internet Protocol (IP) address – the number assigned to your computer; this is not your e-mail address

We count unique IP addresses to learn how many visitors go to each web page during specific times. Counting total visitors helps us decide how to make the web site work better in the future.

  • The type of web browser you used during your visit – for example, Internet Explorer, Google Chrome, or Firefox

Web pages do not always display the same on every type or version of web browser. We use web browser information to make sure the web site is coded for appropriate access

We may also collect the following information within secure areas:

  • The Internet domain you visited from
  • The date and time you access the site
  • The pages, files, documents and links you visit (to improve the options we can provide to you and to make sure that we display our information in a way that suits you)
  • The Internet address of the web site from which a link to the web site is made

MAXIMUS will collect information from the web site you are using only for these purposes and for purposes related to the services we provide on behalf of MDH.

Information We Share

The collection of information through this web site and the disclosure of that information are subject to the provisions of the Health Insurance Portability and Accountability Act (HIPAA) (Public Law 104-191). Except as we state below or as otherwise authorized by law, MAXIMUS will only collect or disclose personal information collected through this web site if you have agreed to the collection or disclosure of that personal information. Choosing to provide personal information to MAXIMUS, whether we request it or not, constitutes consent to the collection and sharing of the information with the Maryland Department of Health for the reasons you shared the information with MAXIMUS, as was reasonably ascertainable from the nature and terms of the disclosure. You can view the Maryland Department of Health Privacy Notice at https://health.maryland.gov/HIPAA/Pages/privacy.aspx

MAXIMUS may collect or disclose personal information without your agreement if it is:

  • necessary to perform our statutory duties as authorized by law, or authorized by state or federal statute or regulation
  • to comply with valid legal process such as a search warrant, subpoena or court order

MAXIMUS may also disclose personal information to federal or state law enforcement authorities to enforce its rights against unauthorized access or attempted unauthorized access to MAXIMUS information technology assets.

MAXIMUS does not share your personal information with unaffiliated third parties. Your information may be securely shared with MDH when you submit a case for review.

We may use your information to, among other things:

  • Provide the information or service you request or otherwise respond to your inquiries
  • Improve the content, navigation, and efficiency of the web site

In order to make our web site better for you, we may use and share with others aggregated or anonymous (not personally identifiable) information that we have collected based on web usage data, surveys, or statistical information that we have compiled about our users.

Information We Keep

MAXIMUS is required to keep the information collected through this web site, including personal information that you submit as part of the request for review process for six (6) years after the end of our contract with the State of Maryland Department of Health. To find out more about the rules for keeping information collected through this web site, please e-mail PrivacyOfficial@maximus.com or mail your questions to the MAXIMUS Privacy Office, 1891 Metro Center Drive, Reston, VA 20190.

Cookies

We may use cookies within areas of the web site that are secured to protect information exchanged with MAXIMUS over the Internet. Cookies are small pieces of information distributed to the browser by web sites visited. Cookies can be used to track usage patterns, traffic trends and verify identity for the secure exchange of information. Cookies cannot be executed as code or deliver viruses. Cookies from MAXIMUS can only be read by MAXIMUS web sites. Cookies may be used to store information. For example, they allow future use without having to re-enter information. They are also used to verify identity and allow business to be conducted with a high level of security and privacy. They prevent information from being intercepted when communicating with the web site.

The information generated by the cookie about your use of the web site is sent to MAXIMUS and stored in a secure data center. This information is then used to track and analyze visits to the web site. Cookies collected will not be used to create profiles of users or to track Internet usage outside of the web site.

If you choose to do so, you can configure your browser to notify you when a new cookie is received. You can also view and delete existing cookies, prevent your browser from accepting new cookies, and disable cookies altogether. You will not be denied access to the web site, but your ability to use some areas or functions of the web site may be limited. You may be denied access to certain secure information if cookies are rejected. This is to provide a secure connection and to protect the information you provide. It is important for you to know that MAXIMUS does not use permanent cookies on this web site. After you navigate to a web site not operated by MAXMIUS, the cookie will expire. If you return to the web site, you will receive a new cookie for the duration of that visit.

Security

MAXIMUS, as developer and manager of this web site, has implemented commercially reasonably technical, administrative and physical security measures to protect the integrity of its communications and computing infrastructure and your personally identifiable information from unauthorized access, modification, or use. To protect your communications through this web site, we authenticate, monitor, audit, and encrypt activity. You can tell when you are secure by looking at the location (URL) field. If the URL begins with https:// (instead of http://), the document comes from a secure server. This means your personally identifiable information cannot be read or deciphered by unauthorized individuals. This is part of our continuing commitment to protecting your information. Please note, that despite our efforts, no security measures are completely secure.

Children

MAXIMUS is committed to complying fully with the Children's Online Privacy Protection Act. The Site is not directed towards children under 13 years of age, nor do we knowingly collect information from children under the age of 13.MAXIMUS appreciates your cooperation with this federally mandated requirement.

Links

This web site has links to other web sites. These include links to web sites operated by government agencies, nonprofit organizations, and private businesses. When you link to another web site, you are no longer on a site covered by this privacy policy. You are subject to the privacy policy of that new site. We recommend that you review the privacy policies of those web sites when you visit them.

Reviewing and Correcting Your Information

We try to keep information about you accurate and current. To change or update any personal information maintained by our program, please call us directly at (800) 274-8582.

Changes to this Privacy Policy

We will occasionally update this privacy policy. When we do, we will also revise the "last updated" date at the top of the privacy policy. Please check the web site from time to time for the most current version of our privacy policy.

Your continued use of the web site after we have notified you of changes as described above means that you have accepted the changes.

General Disclaimer

This policy should not be construed in any way as giving business, legal, or other advice, or warranting as fail proof, the security of information provided by MAXIMUS on this web site.

How to Contact Us

If you have any questions or concerns about our privacy policy, please contact us.

E-mail
PrivacyOfficial@maximus.com

Mail
MAXIMUS Privacy Office
1891 Metro Center Drive
Reston, VA 20190 USA