Confidentiality Statement

CareFirst BlueCross BlueShield (CareFirst) and its affiliated companies have policies and procedures to protect the confidentiality of member information. Below are general guidelines for how we handle your information. It is important to note that all records containing confidential medical and insurance data are handled and discarded in a way that is designed to protect the privacy and security of the information.

Concerned about privacy? Please review our Notice of Privacy Practices. If you have a concern, you may contact the Privacy Office at 800-853-9236.

Internet Privacy Statement

CareFirst respects the need for security regarding your personal information. When CareFirst requests that you provide personal information, your information will be protected using Secure Sockets Layer (SSL) technology. SSL is an industry standard that encrypts the information you provide, to avoid the decoding of that information by anyone other than CareFirst BlueCross BlueShield.

Information you submit directly to us will remain on our servers, secured by various industry approved technologies. Unauthorized users will not have access to your personal information.

We regularly monitor the performance of our website. We automatically track and collect the following information when you visit www.carefirst.com:

  • IP address and originating domain name
  • Type of computer and web browser

CareFirst uses cookies to help analyze site traffic patterns. The cookie identifies your computer and contains absolutely no personal information about you or your health. Since we do not collect personal information via cookies, we therefore do not keep or provide to anyone personal information that could be obtained from cookies.

Health Information

Protecting member's confidential information has always been a priority for CareFirst.

You have certain additional rights relating to your protected health information, whether oral, written or electronic. The Notice of Privacy Practices explains those rights.

General information about a claim can be provided to family members or other authorized representatives to solve a question or complaint, but specific diagnostic information can only be discussed with your written permission.

Medical Records

We do not collect or maintain copies of your medical records.

You may request access to your medical records by contacting your provider's office. You must follow the provider's procedures for accessing medical information.

Other Uses of Information

Other uses of your member information including personal and financial data collected by CareFirst are required or permitted by law.

We will continue our commitment to keep your personal, financial and medical information private and secure. The Notice of Privacy Practices explains how your information is used and disclosed.

Treatment Setting

Providers are required to implement privacy policies that address the disclosure of:

  • Medical information
  • Patient access to medical information
  • The storage/protection of medical information

CareFirst reviews provider confidentiality processes during pre-contractual site visits for primary care physicians.