Privacy policies

Internet privacy policy

CareOregon respects the privacy of our members, providers and other visitors to our website, careoregon.org. You do not have to give us personal information to find information on this website. 

Information automatically collected and stored

When you browse any website, personal information about you can be collected. We automatically collect and temporarily store the following information about your visit:

• Domain name you use to access the Internet (for example, gmail.com or OHSU.org)
• Date and time of your visit
• Pages you visited
• Address of the website you came from when you first opened a page in careoregon.org

CareOregon documents and analyzes website traffic so we can measure public interest in our website. We use this information for statistical purposes and to help us make our site more useful to visitors.

Personally identifying information

We use personally identifying information (name, email address, physical address and other unique identifiers) only in connection with careoregon.org or for purposes that we describe when we collect it. We may collect personally identifiable information only if you specifically and knowingly provide it. If you choose to provide information about yourself through an email, online form or survey, etc., we keep the information only as long as we need it to respond to your question or to carry out the stated purpose of the communication. 

Disclosure

CareOregon protects personal information that you share with us. We do not disclose, give, sell, rent or trade email lists or personal information with other companies for marketing purposes.

We may disclose personally identifiable information you submitted on this website if we believe that we must do so to comply with a judicial proceeding, court order or legal process served on our website.

Hybrid Entity Designation 

The Health Insurance Portability and Accountability Act ("HIPAA”) and its implementing regulations apply to “Covered Entities” as defined by 45 C.F.R. § 160.103, including health plans such as CareOregon. 

Covered Entities whose business activities include both covered functions and non-covered functions, such as CareOregon, may designate themselves as “Hybrid Entities” under 45 C.F.R. § 164.103 and 45 C.F.R. § 164.105. Designation as a “Hybrid Entity” means that only the organization’s health care components performing covered functions will be subject to the oversight, compliance, and enforcement obligations of HIPAA. Components that are not health care components and do not perform covered functions remain outside HIPAA obligations. 

CareOregon hereby makes this hybrid entity designation, under which the non-healthcare components of the CareOregon are not subject to HIPAA or any related company policies. 

Read more about CareOregon's hybrid entity designation here. 

Email

Remember that electronic mail is not secure. If your message is very sensitive, please send it by postal mail or use our secure member portal to send us a message.

Links to other websites

This website contains links to other websites. Please understand that CareOregon is not responsible for the privacy practices of other websites.

This privacy policy applies solely to information collected on careoregon.org. If you have questions or concerns about our Internet privacy statement, please contact our compliance officer at 503-416-4760, toll-free 800-224-4840 or TTY 711.