Starting in 2021, a new federal rule made it easier for Ascension Personalized Care members* to manage their digital medical records.
The Interoperability and Patient Access rule (CMS-9115-F) makes it easier for members to get their health records when they need it most. You now have full access to your health records on your mobile device. This allows you to manage your health better and know what resources are available to you.
Starting in 2022, the Payer-to-Payer Data Exchange portion of the rule* will allow former and current members to request that their health records go with them as they switch health plans. For more information about this rule, visit the Payer-to-Payer Data Exchange section found on this web page.
Imagine:
- You go to a healthcare doctor or specialist because you don't feel well and you can show that provider your health history from the past five years.
- The doctor uses that information to diagnose you and you quickly find the right specialist by checking an up-to-date provider directory.
- You have a question about a claim, so you go to your computer or mobile device and, in minutes, you see if it's paid, denied, or still being processed.
- You can take your health history with you as you switch health plans.
The new rule makes it so you can easily find information on**:
- Claims (paid and denied)
- Healthcare doctors and specialists
- Specific parts of your clinical information
-
Samples of data we maintain
Patient Demographics
- first name
- last name
- previous name
- middle name
- suffix
- birth sex
- date of birth
- race
- ethnicity
- preferred language
Allergies & Intolerances
- substances (medications)
- substances (drug class)
- reaction
New Demographics- current address
- previous address
- phone number
- phone number type
- email address
Health ConcernsImmunizations
Procedures
Medications
Laboratory Tests & Results
Assessment & Treatment Plan
Care Team Members
-
Why is this so important?
Having your information in one place can help you:
- Understand your health better
- Make better decisions
- Improve your health outcomes
- Reduce healthcare costs
- Carry information to new doctors or health plans
-
Keeping your protected health information (PHI) safe is important to us
Your privacy and the security of your PHI is a top concern of ours. The new rule allows you to use an app from a third-party application developer (a company with no connection to Ascension Personalized Care). You can use this app to look up your health information. When choosing an app, it is important to consider how your data can be used and the app's security and privacy practices.
The CARIN alliance is working to advance the exchange of health information. We will require third-party application developers to agree to follow certain privacy standards outlined in the CARIN Code of Conduct. The CARIN Code of Conduct is a set of practices that these applications have voluntarily adopted to protect and secure your health information. Visit the My Health Application website to see a list of apps that have agreed to the CARIN Code of Conduct. We will give you information on federal agencies you can contact if you feel your rights to patient privacy have not been protected. Learn more about the CARIN Alliance.
Before sharing your data with a third party application, we will ask you to agree to an Access Your Data statement. This is an added security step to protect your data.
-
Current members: What to do now
1. Find an app. Visit the My Health Application website for a list of apps that meet the CARIN Code of Conduct. By agreeing to the CARIN Code of Conduct, the app developer attests it meets certain standard security practices. These practices include, but are not limited to:
- Protection of a user’s personal data against:
- loss or unauthorized access
- use
- alteration
- destruction
- unauthorized annotation
- disclosure
- Protect personal data through a combination of mechanisms including:
- secure storage
- encryption of digital records both in transit and at rest
- data-use agreements and contractual obligations
- accountability measures (e.g., access controls, logs and independent audits)
- Comply with applicable breach notification laws
- Provide meaningful remedies to address security breaches or other violations due to a misuse of the user’s personal data
- Adopt internal policies and secure contractual commitments with third parties to prohibit the re-identification of de-identified or anonymized data
2. Download the app. Smartphone apps are available through the Google Play Store (Android) and the App Store (iOS). Web apps are also available for computers.
3. Create your account.- To link your health information, choose your health plan
- On the login screen, enter your member portal username and password
- Read the Access your Health Data statement. If you agree to the terms, click “Allow Access”
4. Use your information to manage your healthcare. -
How can I access my health information through a third party application of my choice?
The Interoperability and Patient Access final rule requires CMS-regulated payers to implement and maintain a secure, standards-based Patient Access Application Programming Interface (API) that enables patients to access their health information through a third-party application of their choice.
Ascension Personalized Care and US Health & Life are required to comply with the Centers for Medicare and Medicaid Services (CMS) Interoperability and Patient Access Final Rule and is using the Ascension API Developer Portal to support these API connections with third-party applications.
In order to enable API connections, third-party developers must register their app with Ascension Developer Portal to make the app available for use by Ascension Personalized Care Network members.
To view API information, please click here.
For third party application access, please click here.
To access the developer portal link, please click here.
-
How do I find the right third-party app?
Visit the My Health Application website for a list of apps or contact our customer service department at 833-600-1311 for assistance.
-
How does payer-to-payer data exchange work for both current and former members?
Members may request Ascension Personalized Care send their health records to other health plans. They can also request that Ascension Personalized Care receive health records from other health plans. If a member switches health plans, Ascension Personalized Care will send their clinical records (including USCDI data set) to another health plan. This is in order to build a complete health record. A complete health record will help a member make decisions that improve their quality of care and health outcomes.
Former members of Ascension Personalized Care should start the request through their new health plan. Based on this request, Ascension Personalized Care will send the clinical records to their new health plan.
Current members of Ascension Personalized Care may start the request by contact customer service at 833-600-1311.
-
How does the new interoperability and patient access rule affect me?
To learn more, contact the Uniquely Ascension Service Center at 833-600-1311.
-
How many years back will my information go?
You will have access to health information with a date of service of January 1, 2016 or later.
-
Can I access my health information if I got to a different health plan or doctor?
Yes. You will be able to access your health information no matter what health plan or doctor you go to.
-
Can I find out if I'm up to date on my immunizations?
Yes. You can use an app to see what shots you've had with a date of service January 1, 2016 or later.
-
Do I have to use an app from Ascension Personalized Care?
No. The app is not affiliated with Ascension Personalized Care. Visit the My Health Application website for a list of apps. This includes apps that promise to meet the CARIN Code of Conduct. Follow the instructions on the app to connect it with your health record.
-
Will all apps keep my health information private?
Not every app has agreed to meet the CARIN Code of Conduct or any other set of guidelines. We suggest that you request a Notice of Privacy Practices from the app and read it carefully. If the app does not provide you with a Notice of Privacy Practices, we suggest choosing another app. Visit the My Health Application website for a list of apps that agree to follow the CARIN Code of Conduct. We will also share a list of apps that have agreed to follow our privacy guidelines.
-
When can I have access to my health information in the app?
You will be able to access your health plan information in the apps starting July 1, 2021.
-
Do I have to use an app to get my health information?
No. You do not have to use an app to access your health information. You can contact your doctor or health plan for information.
-
What health data will the app collect?
Depending on the app you choose, some of the health data may include (but is not limited to):
- Claims
- Medications
- Diagnoses
- Procedures
- Doctor visits
The app will ask your permission to collect your health information upon sign up. For additional information on what the app collects, visit their Notice of Privacy Practices.
-
Will the app collect non-health data from my device, such as my location?
Visit the app's Notice of Privacy Practices to understand what information it collects. Many apps have the ability to collect non-health data, such as your location. Please contact your app provider for additional information.
-
Does sharing my data with this app have an impact on my family members?
If a family member is linked to your health account, there is a chance that their health information will be shared.
-
How do I correct mistakes in my health data?
To correct mistakes in your health data you will need to contact your doctor or health plan.
-
What are my rights under the health insurance portability and accountability act (HIPAA)?
Please contact the app provider for their Notice of Privacy Practices.
Most apps will not be covered by HIPAA. They will instead be covered by the Federal Trade Commission (FTC) and the protections provided by the FTC Act. The FTC Act protects against deceptive acts.
For more information:
- Visit the FTC website for information about mobile app privacy and security for consumers.
- For apps subject to HIPAA, the HHS.gov website has information about HIPAA patient rights and requirements. It also has HIPAA FAQ's for individuals.
-
What are my rights when it comes to my data collected on this app?
Please request a Notice of Privacy Practices from the app provider to understand your rights.
-
What should I do if my data has been shared, stolen, or improperly used?
The app provider's Notice of Privacy Practices will detail how they respond to privacy and security incidents. You have the right to file a complaint with enforcement agencies including the Office for Civil Rights (OCR) and the Federal Trade Commission (FTC).
Most apps will not be covered by HIPAA. They will instead be covered by the Federal Trade Commission (FTC) and the protections provided by the FTC Act. The FTC Act protects against deceptive acts.
For more information:
About filing a complaint with OCR under HIPAA, visit the HHS.gov website.
Individuals can file a complaint with OCR using the OCR complaint portal.
Individuals can file a complaint with FTC using the FTC complaint assistant.
-
How will the app use my data?
The purpose of the app is for you to see your health data in one place. Please request a Notice of Privacy Practices from the app provider to understand how the app will use your data.
-
Can the app share my data with third parties?
Please contact the app provider to request a Notice of Privacy Practices to understand if the app will share your data with third parties.
-
I no longer want to use the app. How do I stop the app from accessing my health information? Do I have to do more than delete the app from my device?Please contact the app provider to request a Notice of Privacy Practices to understand if what happens to your data after you stop using the app.
-
Does the app delete my data after I stop using it?Please contact the app provider to request a Notice of Privacy Practices to understand if what happens to your data after you stop using the app.
-
How do I stop sharing my data?
To stop sharing data, visit the app or contact the app's support. You can also contact the Uniquely Ascension Service Center at 833-600-1311.
-
Will this app sell my data for advertising or research?Please contact the app provider to request a Notice of Privacy Practices to understand if the app will share your data with third parties for advertising and research.
-
How does this app collect and respond to user complaints?
App providers may respond to complaints in different ways. Please contact your app provider for additional information.
-
Will my data be stored in a de-identified or anonymized form?Please contact the app provider to request a Notice of Privacy Practices to understand how the app stores your data.
-
What security measures does this app use to protect my data? Will they inform me if an incident occurs?Please contact the app provider to request a Notice of Privacy Practices to understand their security practices.
-
How can I limit this app's use and release of my data?
Please contact the app provider to request a Notice of Privacy Practices to understand how to limit the use and release of your data.
*Applies to Medicare Advantage, Medicaid and CHIP Managed Care and federally funded ACA exchange plans.
**Data will be available for dates of service on or after January 1, 2016.
***Vital Signs maintained by the Health Plan will be available.