Privacy and Security
Your Personal Information - Protecting yourself and your family is important. There may be personal information you want to keep as private as if it were in a bank vault. That's why URAC reviews the Privacy Policies of every health Web site it accredits, and why URAC makes sure you are informed and protected. Our rigorous review requires each site to be open with its privacy practices and to provide you with choices about how your personal information is collected, used and shared.
Your Personal Health Information - When URAC reviews a Web site that collects, stores, transmits or utilizes your personal health information, URAC holds the Web site to high standards and requires a thorough review by outside security specialists to ensure that your personal health information is safe and secure.
Frequently Asked Questions
What is reviewed during the URAC Accreditation Process?
During the accreditation process, URAC reviews the actual Web site, as well as background information such as site policies and procedures and other documents. URAC also interviews the Web site staff to make sure they understand and abide by the standards.
How does URAC ensure that a Web site is protecting my privacy?
URAC reviews all the site's privacy policies to make sure that they meet URAC standards. Then In addition, URAC reviews the actual Web site, checking for the presence of any activity that would violate the site's own policies or the URAC standards.
How am I informed about how a Web site is protecting my privacy?
URAC Standards require Web site to disclose how they handle personal information. And when you see the URAC accreditation seal, you'll know that the site has been reviewed to ensure that they adhere to their policy and protect your rights.
What should I do if I think that a URAC Accredited Web site is NOT protecting my privacy?
Simply utilize the "contact us" link at the top of every page and you will be directed to a page with links and instructions on how to submit your concerns to URAC. URAC will follow-up with the Web site to correct the problem.
What is the difference between personally identifiable information and personal health information?
Personally identifiable information is any information that might help someone identify a specific person (for example, home address, social security number, telephone number, etc.). Personal health information is information about the health status or history of an individual (for example, if they have a chronic condition, their family medical history, etc.).
Why are URAC's Standards more rigorous when it comes to protecting my personal health information than they are for protecting my personally identifiable information?
The URAC standards are consistent with federal law, and a higher bar for the collection and protection of personal health information than for other types of personal information.
How is my personal health information protected?
For the protection of personal health information, the URAC standards require that Web sites meet or exceed industry security standards and practices to guard against unauthorized access to personal health information.
Can I choose not to have Web site collect information on me?
Yes. The URAC standards require Web sites to give you a choice about the collection of your information. And Web sites have to ask permission before they can collect personal health information.
Can I choose what information is collected by a Web site?
Yes. The URAC Standards require Web sites to allow you not to have your personal information collected. The standards also require the site to ask your permission before it collects personal health information.
Can I view or modify information that a Web site has collected on me?
Yes. The URAC standards preserve your ownership rights to your personal data. You are allowed to view or modify it (or tell the site to stop using it) anytime.
Do Web site that are URAC accredited required to hold any of their partner’s to the same level of accountability?
Yes. The URAC standards require Web sites to hold their business partners to the same level of privacy. So if a Web site shares your information with a partner, it is still protected. (And the Web site is required to disclose to you in advance that they may share the information.)