On Tuesday, Attorney General Eric Schneiderman announced a settlement with Aetna Inc. (“Aetna”), following claims that Aetna revealed the HIV status of approximately 2,460 New York members.
According to information provided by the Attorney General’s office, the privacy breach occurred in a mailing in July 2017.
The envelopes’ oversize transparent address window revealed text confirming the members’ HIV status.
As part of the settlement Aetna will:
- Pay a $1.15 million civil penalty
- Develop and maintain enhanced operating procedures with regard to privacy protections of personal health information and personally identifiable information in mailings
- Hire an independent consultant to monitor and report on the settlement’s injunctive provisions