Protecting Your Personal Health Information
My Blueprint complies with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), which established standards for the privacy of individually-identifiable health information (protected health information*). We have implemented security procedures on this website in an effort to protect your personal medical information. It has always been the policy of Arkansas Blue Cross and Blue Shield through our Code of Business Conduct to protect the confidentiality of personal medical information.
*Protected Health Information (PHI) is defined as health information, including demographic data collected, which permits identification of an individual or could reasonably be used to identify that individual. It includes information regarding the diagnosis, medical treatment, care, advice or counseling of an identified member, the physical or mental condition of the member, or prescription-drug therapy for the member.
My Blueprint Security
For protection of personal information, our member portal, My Blueprint, uses Transport Layer Security (TLS) 256-bit encryption. Data is transferred from Arkansas Blue Cross databases to users during a "secured session" using the TLS handshake messaging protocol. TLS is the industry-standard security protocol for encoding sensitive information and works by creating a shared digital key, which allows only the sender and receiver of the transmission to scramble and unscramble the information.
Your internet browser can tell you whether or not you are in a website secured by TLS technology by the presence of a padlock or key typically in or near the URL address bar at the top of the browser. On older browsers the lock is normally located somewhere along the bottom of your browser's window. If the lock is closed or the key is unbroken, you are in a secured section of your host's website.
When you register to use My Blueprint, we request information from you in connection with your registration. Once you have signed in, you may view or modify the information we have captured about you or change your password by clicking on the link called "Settings."
The combination of your username and password protects access to your personal information. If you fail to enter the correct username or password after three attempts, you will be locked out of My Blueprint for a specified period of time. To maintain the security of your information, do not share your password with anyone. If you give your username or password to others, you assume responsibility for possible unauthorized access. If you suspect the privacy of your username or password has been compromised, please either change your password immediately or email customer service.
We discourage the sending of emails containing personal health information through any other system. Regular, non-encrypted internet email is not secure and should be used only for non-sensitive and non-confidential inquiries.
All online forms in My Blueprint are secured through SSL technology and are encrypted when you submit them to us.
Use of Your Personal Information
Information you voluntarily provide Arkansas Blue Cross during your online sessions may be used and disclosed by Arkansas Blue Cross for our own marketing or administrative purposes, including but not limited to customer or provider service, billing and collection activities of Arkansas Blue Cross or of healthcare providers furnishing services to you, or various wellness, care coordination, or case management services or other business activities or healthcare operations conducted by Arkansas Blue Cross or by its group health plan customers or business associates, consistent with applicable privacy laws and regulations and our own Information Privacy and Security Program. Your information will not be sold to third parties.
Regularly change your password.
Do not share your password with anyone.
Use the links provided within My Blueprint instead of the "back" button or other browser navigational buttons.
"Sign out" when you have finished your session.
Close your web browser when you finished to ensure that no one else can access any private information stored in your browser's memory.