Privacy and Security

Internet Privacy and Security Statement

Welcome to the Internet Privacy & Security Statement (“Privacy & Security Statement”) of Erin Group Administrators, Inc (“EGA”).

The purpose of this Privacy & Security Statement is to summarize and disclose all information collecting and disseminating practices of EGA as concerning its web site, www.ega-inc.com.

This Privacy Statement is effective as of March 1, 2005, and was last updated on February 15, 2008. However, EGA reserves the right to change this Privacy & Security Statement as necessary and without notice to users of this site. This Privacy & Security Statement is not intended to and does not imply any contractual or other legal rights or remedies to or from EGA, its affiliates, subsidiaries, assigns, agents or any other party.

1. Security Features

Secure connections are not supported on the current server supporting this site. Secure online inquiry functions are available to employees, their covered dependents and to the authorized representative(s) of our client employer groups. These online inquiry functions are secured as follows:

• The member of client representative must successfully register on the appropriate new user registration page.
• Information entered on these pages is edited against our database to ensure that the individual requesting the access is in fact eligible to use the site.
• A user ID and password are required.
• These connections are secured by a Verisign Global Server ID utilizing 128-bit encryption.
• Claims lookup by client representatives requires authentication via an EGA issued digital certificate.
• If the user’s session is idle for longer than a predetermined period of time, the user will be logged off of the site and must log back in to continue use of the secure site.

2. Collection of Personal Information

EGA will not be tracking personal data. No cookies are placed on the hard drive of visitors to our public pages. EGA tracks only the requesting IP address from the public and secure pages of our web site. If an error exception occurs during the use of the public or secure pages of our web site, IP address, referrer and the specific error message are tracked.

EGA does place a cookie on the hard drive of visitors to our secure pages. This cookie consists of a guest number and security code, which is used to further ensure the integrity of requests made over the secure pages.

3. Use of Data Collected from Input Forms

EGA’s public web site pages do not contain input forms. Email submitted using specific email links on our web site merely allow the user to send an email to the individual shown. No additional information is saved.

Information entered as part of secure web applications, including registration information, email requests to EGA customer service and policy administration, and employer or employee entered enrollment changes, is used by EGA solely for customer service purposes. Requests by client representatives for claims lookup is logged at a summary level for purposes of compliance with the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) regulations.

4. Disclosure of Data

EGA will not sell, trade or disclose data to non-affiliated third parties for any purpose other than EGA’s operations.

5. Logging and Tracking

EGA, as required for compliance with the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (“HIPAA”), maintains activity logs from our secure web pages. The information collected include IP address, date and time of visit, each page visited and the specific data requested including group and member identifiers. Changes to user profiles are also tracked.

6. Links to Non-EGA Web Sites

Links to other entities’ web sites are provided on both the public and secure pages of EGA’s web site. By supplying a link to these web sites, EGA does not endorse these web sites nor are we responsible for their privacy and security policies or content. Concerns should be directed to the owner of these web sites. Note: All EGA web site pages display the EGA logo.

7. Privacy/Security Breaches

EGA is concerned about the privacy and security of this site and its visitors. Because the privacy and security of this site cannot be fully protected from breaches, EGA has established an address for visitors to report breaches and suspected breaches of the privacy and security of this site. Visitors should report any such breaches at hipaa@ega-inc.com.

8. Questions/Concerns

If you have any questions, comments or concerns regarding EGA’s privacy policy and or practices, please send an email to hipaa@ega-inc.com or or contact us at 717-581-1300.