Privacy

Group Supplementary HIPAA Privacy Statement

Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Effective April 14, 2003

We are required by the privacy regulations issued under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") to maintain the privacy of our Plan's customers Protected Health Information, to provide those customers with notice of our legal duties and privacy practices with respect to Protected Health Information, and to send notification to affected customers if there is a breach of unsecured Protected Health Information. If your state provides privacy protections that are more stringent than those provided by HIPAA, we will maintain your Protected Health Information in accordance with the more stringent state standard.

This Notice applies to "Protected Health Information" associated with "Health Plans" issued by American Heritage Life Insurance Company.

This Notice describes how we may use and disclose Protected Health Information to perform claims handling, payment, general insurance operations, and for other purposes that are permitted or required by law. Use or disclosure of your Protected Health Information for the purposes described in this Notice may be made in writing, orally, or by electronic means.

We are required to abide by the terms of this Notice. However, we may change the terms of this Notice at any time. If we change this Notice, we may make the new notice terms effective for all of your Protected Health Information that we maintain, including any information we created or received prior to issuing the new notice. If we make a material revision to our Privacy Notice, copies will be sent to you if you are then currently insured under our Plan.

Protected Health Information means information about you that is created or received by us and during the administration of coverage under the Plan, which identifies you or for which there is a reasonable basis to believe the information can be used to identify you and that relates to:

1. the past, present or future physical or mental health condition of the individual; or
2. the provision of health care to the individual; or
3. the past, present or future payment for the provision of health care to the individual.

Uses and Disclosures of Protected Health Information with Your Written Authorization

Except as described in the next section of this Notice, we will not use or disclose your Protected Health Information for any purpose unless you have signed a form authorizing the use or disclosure. For example, most uses and disclosures of psychotherapy notes, uses and disclosures of Protected Health Information for marketing purposes, and disclosures that constitute a sale of Protected Health Information will be made only with your authorization. You have the right to revoke that authorization in writing at any time, except to the extent that we have already taken action in reliance on the authorization; or the authorization was obtained as a condition of obtaining coverage, to the extent that other law allows the insurer to contest a claim under the policy or the policy itself.

Uses and Disclosures of Protected Health Information Without Your Written Authorization

For Payment.

We may make use of and disclose your Protected Health Information without your written authorization as may be necessary for payment purposes. For example, we may use information regarding your medical procedures and treatment to process and pay claims or certify these services are covered under your Plan.

For Plan Administrative Operations.

We may make use of and disclose your Protected Health Information without your written authorization as necessary for our Plan administrative operations. Plan administrative operations include our usual business activities, examples of which are management, licensing, peer review, quality improvement and assurance, enrollment, underwriting, reinsurance, compliance, auditing, rating, claims handling, complaint handling and other functions related to your Plan. We are prohibited from using or disclosing genetic information for underwriting purposes.

To Individuals Involved in Your Care.

We may, without your written authorization, for the purposes of treatment, payment or Plan administrative operations, disclose the fact that you are covered under a Plan or that payment has been processed to a family member, other relative, your close personal friend or any other person you may identify. In these circumstances, we would not disclose any Protected Health Information which is not directly relevant to that person's involvement with your care or with payment for your care.

If you have designated a person to receive information regarding payment of the premium or pay premium via credit card, we may inform that person or credit card facility when your premium has not been paid or received by us.

We may also disclose limited Protected Health Information to a public or private entity that is authorized to assist in disaster relief efforts in order for that entity to locate a family member or other persons that may be involved in some aspect of caring for you.

To Our Business Associates.

Certain aspects and components of our services are performed through contracts with outside persons or organizations. Examples of these may include, but are not limited to our duly appointed insurance agents, financial auditors, reinsurers, legal services, enrollment and billing services, claim payment and medical management services. We may provide access to your Protected Health Information without your written authorization to one or more of these outside persons or organizations who assist us with payment or Plan administrative operations. We require these business associates to appropriately safeguard the privacy of your information.

To Plan Sponsors.

If you are enrolled in a group health plan, we may share summary health information with your employer, union, or other employee organization that sponsors and maintains the group health plan, for purposes of obtaining premium bids; or modifying, amending, or terminating the group health plan; or enrollment and disenrollment information. Summary health information excludes genetic information.

For Other Products and Services.

We may contact you without your written authorization to provide information regarding Plan upgrades or additional benefits that may be of interest to you. For example, we may use the fact that you currently are insured under a Plan for the purpose of communicating to you about changes to our Plan or products that could enhance or add value to existing coverage.

For Disclosure with Authorization.

Unless otherwise excluded in this notice, we will not disclose any other Protected Health Information to any person or entity not specifically mentioned elsewhere in this Notice without your express written authorization.

For Other Uses and Disclosures.

We are permitted or required by law to make some other uses and disclosures of your Protected Health Information without your authorization. We may release your Protected Health Information:

• if required by law to a government authorized health oversight agency or company conducting audits, investigations, or civil or criminal proceedings.
• if required to do so by a court or administrative ordered subpoena or discovery request. In most cases you will have notice of such a release.
• as required by law if we suspect child abuse or neglect or if we believe you to be a victim of abuse, neglect or domestic violence.
• for public health activities, such as required reporting of disease, injury, birth and death and for required public health investigations.
• to the Food and Drug Administration if necessary to report adverse events, product defects or to participate in product recalls.
• to law enforcement officials as required by law to report wounds, injuries or crimes.
• to coroners, medical examiners and/or funeral directors consistent with law.
• for a national security or intelligence activity or, if you are a member of the military, as required by the armed forces.
• to workers' compensation agencies or similar programs, established by law, that provide benefits for work-related injuries or illness without regard to fault.

Your Rights

Right to Inspect and Copy Your Protected Health Information.

You may have access to our records that contain your Protected Health Information in order to inspect and obtain copies of the records. Under limited circumstances, we may deny you access to a portion of your records. If you desire access to your records, please obtain a record request form from our Privacy Officer and submit the completed form to our Privacy Office. If you request copies, we may charge you copying and mailing costs. If you request a copy of your Protected Health Information in electronic form, we will provide it to you electronically only if the record is readily producible in electronic form.

Right to Amend Your Protected Health Information.

You have the right to request that we amend your Protected Health Information maintained in our enrollment, payment, claims adjudication and case or medical management records, or other records we use to make decisions about you. If you desire to amend these records, please obtain an amendment request form from our Privacy Officer and submit the completed form to our Privacy Office. We will comply with your request unless special circumstances apply. If your physician or other health care provider created the information that you desire to amend, you should contact the provider to amend the information.

Right to an Accounting of the Disclosures of Your Protected Health Information.

Upon request, you may obtain an accounting of certain disclosures of your Protected Health Information made by us on or after April 14, 2003, excluding disclosures made earlier than six years before the date of your request. If you request an accounting more than once during any 12 month period, we will charge you a reasonable fee for the subsequent accounting statements.

Right to Request Confidential Communications.

We will accommodate your reasonable request to receive communications of your Protected Health Information from us by alternative means of communication or at alternative locations if the request clearly states that disclosure of that information could endanger you.

Right to Request Restrictions on Use and Disclosure of Your Protected Health Information.

You have the right to request restrictions on some of our uses and disclosures of your Protected Health Information to family members and others involved in your care or payment for care; or some of our uses and disclosures used to carry out treatment, payment, or Plan administrative operations, by notifying us of your request for a restriction in writing mailed to the contact identified at the end of this Notice. Your request must describe in detail the restriction you are requesting. We are not required to agree to your restriction request but will attempt to accommodate your requests. We retain the right to terminate an agreed-to restriction. In the event of a termination of an agreed-to restriction by us, we will notify you of such termination, but the termination will only be effective for Protected Health Information we receive after we have notified you of the termination. You also have the right to terminate any agreed-to restriction by contacting us using the "Contact Information" provided at the end of this Notice.

Personal Representatives.

You may exercise your rights through a personal representative who will be required to produce evidence of his or her authority to act on your behalf. Proof of authority may be made by a notarized power of attorney, a court order of appointment of the person as your legal guardian or conservator, or if you are the parent of a minor child. We reserve the right to deny access to your personal representative.

Right to Receive Paper Copy of this Notice.

You may obtain a copy of this Notice. You may obtain a paper copy of this Notice even if you agreed to receive such notice electronically. Please contact us and we will mail it to you.

Complaints

If you believe your privacy rights have been violated, you can file a complaint with the Plan or with the Secretary of the U.S. Department of Health and Human Services. To file a complaint with the Plan, send it in writing to the "Contact Information" at the address listed at the end of this Notice. There will be no retaliation for filing a complaint.

You may obtain a copy of this Notice by writing to us at the contact address below.

Contact Information

If you have questions or need further assistance regarding this Notice, you may contact:

Allstate Benefits
Attn: HIPAA Privacy Officer
1776 American Heritage Life Drive
Jacksonville, Florida 32224

Or, you may telephone the Customer Care Center at 1-800-521-3535.

Group Health HIPAA Notice of Privacy Policy:

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

GLB Privacy Statement

Important Privacy Policy Notice

Revised March 2014 At Allstate Benefits ("AB"), we value you as a customer. We also share your concerns about privacy. We provide this notice to explain how we treat personal information ("customer information") that is not public. This is information that we obtain from you or other sources when we provide you with products and services.

We want you to know that: we respect your privacy; and we protect your information.

• We do not sell customer information.
• We do not share your information with: persons; companies; or organizations outside of AB that would use that information to contact you about their products and services.
• We expect persons or organizations that provide services on our behalf to keep your information confidential. We also expect them to use your information only to provide the services we've asked them to perform.
• We communicate to our employees about the need to protect your information. We have established safeguards (these are physical, electronic and procedural) to protect this information.

Below are answers to questions that you might have about privacy. You may be wondering...

What do we do with your information?

AB does not sell your customer or medical information to anyone. We do not share it with companies or organizations outside of AB that would use that information to contact you about their own products and services. If this were to change, we would offer you the option to opt out of this type of information sharing. Also, we would obtain your consent before we share medical information for marketing purposes.

Your agent or broker may use your information to help you with your insurance needs. We may also communicate with you about products, features, and options in which you have expressed an interest. Without your consent, we may provide your information to persons or organizations in and out of AB. This would be done as permitted or required by law. We may do this to:

• Fulfill a transaction you have requested.
• Service your policy.
• Market our products to you.
• Investigate or handle claims.
• Detect or prevent fraud.
• Participate in insurance support organizations (Information from a report by an insurance support organization may be retained by that organization and distributed to other persons.).
• Comply with lawful requests from regulatory and law enforcement authorities.

These persons or organizations may include:

• Our affiliated companies.
• Companies that perform services, including marketing, on our behalf.
• Other financial institutions with which we have an agreement for the sale of financial products.
• Other insurance companies to perform their role in an insurance transaction involving you.
• Businesses that conduct actuarial or research studies.
• Persons requesting information pursuant to a subpoena or court order.
• Your agent or broker.
• An employer, if your premiums are payroll deducted.
• The creditor who sold you insurance, if your policy is credit insurance.

What kind of customer information do we have, and where did we get it?

Much of the information that we have about you comes from you. When you perform certain transactions, you may give us information such as your name, address and Social Security number. These transactions include when you submit: an application for insurance; a request for insurance; a request for products and services we offer; or a request for an insurance quote. We may have contacted you by telephone or mail for additional information. We keep information about the types of services you purchase from us and our affiliates. Examples of this include premiums, fund values, and payment history. We may collect information from outside sources such as consumer reporting agencies and health care providers. The information we collect may include the following:

• Motor vehicle reports.
• Credit reports.
• Medical information.

How do we protect your customer information?

We expect any company with whom we share your information to use it only to provide the service we have asked them to perform. Information about you is also available within AB to those individuals who may need to use it to fulfill and service the needs of our customers. We communicate the need to protect your information to all employees and agents. We especially communicate this need to individuals who have access to it. Plus, we have established physical, electronic, and procedural safeguards to protect your information. Note that if your relationship with us ends, your information will remain protected. This protection will be provided according to our privacy practices outlined in this Important Notice.

How can you find out what information we have about you?

You may request to see, or obtain by mail, the information about you in our records. If you believe that our information is incomplete or inaccurate, you may request that we correct, add to, or delete from the disputed information. In order to fulfill your request, we may make arrangements to copy and disclose your information to you on our behalf. This may be done with an insurance support organization or a consumer reporting agency. You may also request a more complete description of the entities to which we disclose your information, or the conditions that might warrant such disclosures. Please send any of the requests listed above in writing to:

Allstate Benefits
Policyholder Services (Privacy Section)
1776 American Heritage Life Drive
Jacksonville, FL 32224-6687

The Internet and Your Information Security

Our web site, www.AllstateBenefits.com, provides information about us, our products, and the agencies and brokers that represent us. You may also perform some transactions on the web site. This Privacy Statement applies to users of www.AllstateBenefits.com, regardless of whether the user is an Allstate Benefits customer.

We use cookies, analytics and other technology to help us provide users with a better service and a more customized web experience. Many commercial Internet sites use cookies; a cookie enables the site to label you as a particular user, but it does not identify you by name or address unless you have provided us with such information (over the Internet or otherwise) or set up preferences in your browser to do so automatically. Cookies allow us to provide you with a more customized service and are used to track and measure Web site usage. This information may be used to manage and customize our Web site's content, layout, and services in order to improve our site, enhance customer service, and provide tailored messages.

AB does not respond to "do-not-track" (DNT) signals in browsers. Also, AB does not authorize third parties to collect personally identifiable information about your on-line activities on our Web site.

Who Should Use Our Web Site?

Our Web site is for insurance products and services and is not intended for children; we do not market any products or services to children under the age of thirteen or knowingly collect any information from children under the age of thirteen. If we become aware that information is or has been submitted by or collected from a child under the age of thirteen, we will delete this information.

What Security Procedures Do We Use to Guard Against the Loss, Misuse, Alteration, or Theft of Information While That Information Is Being Submitted to Allstate Benefits Over the Internet?

To help ensure the security of your personal and financial information that you submit to this site, (other than via an e-mail message), we use security software to encrypt the information before and during its transmission through the Internet. We only allow information to be submitted for transmission if your browser is compatible with our security software. If your browser is not compatible, you will receive a message indicating your transaction can be completed but at a lower level of security. No method of transmission over the Internet, or method of electronic storage, is 100% secure, however. Therefore, we cannot guarantee its absolute security.

E-mail messages are not secure. Our security software does not encrypt e-mail messages. E-mail messages traveling through the Internet are subject to viewing, alteration, and copying by potentially anyone on the Internet.

You should exercise discretion with respect to the submission of any personal or financial information via e-mail. If you are concerned about the security of your communication, we encourage you to send your correspondence through the postal service or use the telephone to speak directly to us. We are not responsible for the security or confidentiality of communications you send to us through the Internet using e-mail messages.

What Can You Do as a Customer to Help Maintain the Security of Information When Accessing Allstate Benefits Over the Internet?

Some steps you can take to maintain the security of your information include:

• Utilize the latest, updated version of your Web browser.
• When using MyBenefits, keep your Login ID and password confidential. Utilize a password unique to you and, if possible, change it frequently.
• Make sure others are not watching you enter your Login ID or password on your keyboard when using MyBenefits or when using other protected areas of AllstateBenefits.com
• Do not leave your computer unattended while logged onto MyBenefits or other protected areas of AllstateBenefits.com. After you've finished accessing your information, exit MyBenefits or other protected area within AllstateBenefits.com, and close your browser window.

Whose Privacy Statement Applies to Links and Co-Branded Sites?

This Web site may contain links to other sites. The links are provided as a convenience to persons who visit this Web site. If you choose to use the services provided by those sites, you may be asked by those sites to provide certain personally identifiable information (some of which may be shared with Allstate Benefits). Please be aware that Allstate Benefits is not responsible for the privacy practices of those sites. We encourage you to be aware when you leave our site and to read the privacy policies of every Web site that you visit, as the privacy policies of those sites may differ from ours. Our Privacy Statement applies solely to this Web site.

We hope you have found this notice helpful. If you have any questions or would like more information, please don't hesitate to contact your agent or write us at:

Allstate Benefits
Policyholder Services (Privacy Section)
1776 American Heritage Life Drive
Jacksonville, FL 32224-6687

This notice is being provided on behalf of the following companies:

American Heritage Life Insurance Company
Holiday Life Insurance Company
Bluegrass Life Insurance Company
Kentucky Home Mutual
Acme United Insurance Company
Keystone State Life
SMA Life Assurance Company
National Guardian Life