Notice of Washington and Lee University Health Benefit Plan Privacy and Security Practices

The Washington and Lee University Employee Health and Welfare Plan (the "Plan") is committed to protecting the privacy and security of your protected health information and electronic protected health information as defined under HIPAA (may be collectively referred to herein as "health information" or as "PHI" or "EPHI"). Health information is information that is created or maintained by the Plan that identifies you and relates to a health condition, or to the provision or payment of health services for you. The Plan also pledges to provide you with certain rights related to your health information, as required by HIPAA.

By this Notice of Plan's Privacy and Security Policies and Practices ("Notice"), the Plan informs you that it has certain legal obligations under the federal health privacy provisions contained in the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"), the HITECH Act, and the related regulations ("privacy rules" and "security rules") and outlines its policies and practices to comply with those obligations. This Notice also informs you how the Plan uses and discloses your health information and explains the rights that you have with regard to your health information maintained by the Plan.