Personal Health Information

Maintenance and Disclosure Policy and Procedures

Personal health information collected by StayWell Solutions Online is kept on backup tapes that are stored at a secure offsite location for seven years and then destroyed. However, personal health information for registered users may remain on StayWell Interactive servers indefinitely.

It is the policy of StayWell Solutions Online that no personal health information is released to any entity with the exception of a court order.

In the event of a court order, the following procedures will be followed:

1. The vice president/editorial at StayWell Solutions will issue a dated and signed request to StayWell Interactive to retrieve the requested data.

2. StayWell Interactive will retrieve that data, transform it into a Microsoft Word Document and return it by certified mail to StayWell Solutions.

3. The vice president/editorial at StayWell Solutions will transmit the requested information to the law firm retained by StayWell Solutions, which in turn shall communicate the information to the court.

4. At no time shall electronic means be used to move the requested information to the parties involved.

5. All files related to the disclosure will be retained for seven years by StayWell Solutions.

6. Each instance of disclosure shall be reported to the Quality Oversight Committee, but the personal health information itself will not be shared.

Approved by members of the Quality Assurance Committee 3/28/2005