Illinois Client Enrollment Services privacy statement
Last updated: [June 1, 2021]
Maximus commitment to privacy
Thank you for visiting the Illinois Client Enrollment Services website (Site) operated by Maximus for the Illinois Department of Healthcare and Family Services (HFS) HealthChoice program. This Site, located at EnrollHFS.Illinois.gov, is designed to make it easier for you to enroll in a health plan and interact with Illinois Client Enrollment Services online. This privacy statement governs your use of the Site. Please read this document carefully before you access and use the Site.
Confidentiality is a top priority at Maximus. We are committed to ensuring the security and confidentiality of your information. Maximus respects your privacy and we have developed the following privacy statement to demonstrate our commitment to you.
This privacy statement applies to:
- Information we collect about you
- How we use the information
- Choices you have about how we collect and use your information
This privacy statement does not apply to:
- Privacy practices associated with any activities done outside your use of this Site
- Websites other than this website
- Applications other than this application
- Products and services not available or enabled through the Site
Visit HFS online for a copy of the HFS privacy statement.
- Information we collect
- How we use and share the information collected
- Website time out
- Information we retain
- Website privacy statement
- Cookies, “Do Not Track” signals, and Adobe Analytics
- Opt out of cookies and Adobe Analytics
- “Do Not Track”
- Reviewing and correcting your information
- Information disclaimer
- How to contact us
Information we collect Return to contents
In order to use some of this Site’s features, you may be asked to provide personal information. Maximus does not collect any personal information about you through this Site unless you provide that information voluntarily.
You provide personal information voluntarily when you enroll in a health plan using this Site. We clearly identify data you must provide so we can deliver the services or information you have requested. Maximus may ask that you provide or verify the following personal information; the list is not exhaustive:
- First and last name
- Recipient Identification Number (RIN)
- Last four digits of Social Security number (SSN)
- Date of birth
- Mailing address
- County of residence
- Phone number
During your visit to the Site, you may complete a transaction such as enrolling in a health plan. The information, including personal information, that you volunteer is used by Maximus to operate the HealthChoice Illinois program, which includes the provision of goods, services and information.
Maximus maintains policies that protect the confidentiality of personal information obtained in the course of its regular business functions. Maximus privacy policies impose a number of standards to guard the confidentiality, prohibit the unlawful disclosure, and limit access to personal information (such as Social Security numbers and Medicaid ID numbers). Maximus safeguards personal information by having physical, technical and administrative safeguards in place.
How we use and share the information collected Return to contents
The collection of information through this Site and the disclosure of that information are subject to the provisions of the Health Insurance Portability and Accountability Act (HIPAA) (Public Law 104-191). To learn more about Health Information Privacy, visit HHS.gov.
Choosing to provide personal information to Maximus, whether we request it or not, constitutes consent to the collection and sharing of the information with Illinois HFS for the reasons you shared the information with Maximus.
Except as stated below or as otherwise authorized by law, Maximus will only collect or disclose personal information through this Site if you have agreed to the collection or disclosure of that personal information. Maximus may collect or disclose personal information without your agreement if it is:
- Necessary to perform our statutory duties as authorized by law, or authorized by state or federal statute or regulation
- To comply with valid legal process such as a search warrant, subpoena or court order
Maximus may also disclose personal information to federal and state law enforcement authorities to enforce its rights against unauthorized access or attempted unauthorized access to Maximus information technology assets.
Maximus may disclose personal information to its agents, affiliates and subcontractors to allow them to perform certain functions relating to your enrollment in a health plan.
Maximus does not share your personal information with unaffiliated third parties. We may use your information to improve the content, navigation and efficiency of the Site.
In order to make our Site better for you, we may use and share (with others) aggregated or anonymous (not personally identifiable) information that we have collected based on usage data, surveys or statistical information that we have compiled about our users.
Website time out Return to contents
For security purposes, your URL online session is set up to end after 16 minutes of user inactivity. You will receive a session timeout warning after 15 minutes of inactivity, allowing you to either continue your session or log out. If you do not make a selection, your session will end after 16 minutes of inactivity.
Information we retain Return to contents
Maximus retains the information collected through this Site, including personal information that you submit for you enrollment to a health plan, as required by our contract with Illinois HFS. To find out more about the rules for retaining your information, please mail your questions to the contact information provided below.
Website privacy statement Return to contents
Our web server automatically collects and logs web usage data when you visit the Site. This information is collected on behalf of Illinois HFS. This information, including your Internet Protocol (IP) address, referring sites, pages viewed, browser type, operating system, CPU speed, referring or exit web pages, and length of visit, informs us about how visitors use and navigate the Site. Maximus will collect the information above from your visit to the Site only for these purposes and for purposes related to the services we provide on behalf of Illinois HFS.
Cookies, “Do Not Track” signals, and Adobe Analytics Return to contents
Our website uses Adobe Analytics. Adobe Analytics does not identify individual users or associate your IP address with any other data held by Adobe Analytics. We use reports provided by Adobe Analytics to help us understand website traffic and webpage usage. You may view the Adobe Analytics Privacy Statement located on the Adobe Privacy Center.
Opt out of cookies and Adobe Analytics Return to contents
“Do Not Track” Return to contents
“Do Not Track” is a preference you can set in your web browser to let websites you visit know that you do not want them collecting information about you. The Site does not currently respond to a “Do Not Track” or similar signals.
Security Return to contents
Maximus is strongly committed to protecting personal information collected through this Site against unauthorized access, use or disclosure. Maximus limits employee access to personal information collected through this Site to only those employees who need access to the information to perform their official duties. Employees who have access to this information follow appropriate procedures in connection with any disclosures of personal information.
Maximus uses various technological and procedural security measures in order to protect the personal information we collect through the Site from loss, misuse, alteration or destruction. We have documented information security and privacy policies to address data protection. We regularly provide information security and privacy awareness training to our employees. However, you should be aware that due to the open and unsecured character of the Internet, Maximus cannot be responsible for the security of transmissions of personal information over the Internet. We have prepared a formal incident response plan in case of a data breach.
To protect your communications through the Site, we authenticate, monitor, audit and encrypt activity. You can tell when the site is secure by looking at the location (URL) field. If the URL begins with https:// (instead of http://), the document comes from a secure server. This means your personally identifiable information cannot be read or deciphered by unauthorized individuals. This is part of our continuing commitment to protecting your information. Please note, that despite our efforts, no security measures are completely secure. Use of this system constitutes consent to such monitoring and auditing.
Children Return to contents
Maximus is committed to complying fully with the Children’s Online Privacy Protection Act. Although parents are free to use this website on behalf of their children, we do not direct this site to children or knowingly collect personal information from children. We are pleased to work with parents and guardians to delete, from our records, personal information that a child may have disclosed improperly on this website. Maximus appreciates your cooperation with this federally mandated requirement.
Reviewing and correcting your information Return to contents
We try to keep information about you accurate and current. To change or update any personal information maintained by our program, you may write Maximus at the address below. In your correspondence, please indicate with as much detail as possible. Personal information maintained by any of our contracts administered on behalf of federal, state or local government entities should be corrected by contacting the specific customer service department. Please refer to the section on “How to contact us.”
Information disclaimer Return to contents
Information provided on this Site is intended to allow the public immediate access to public information. While all attempts are made to provide accurate, current and reliable information, Maximus recognizes the possibility of human and mechanical error. Therefore, Maximus, its employees, officers and agents make no representations as to the accuracy, completeness, currency or suitability of the information provided by this Site and deny any expressed or implied warranty as to the same.
We will occasionally update this privacy statement. When we do, we will revise the “last updated” date at the top of the privacy statement. Please check the Site from time to time for the most current version of our privacy statement. Your continued use of the Site after we have notified you of changes (as described above) constitutes your acceptance of the changes.
How to contact us Return to contents
If you have any questions or concerns about reviewing and correcting your information, please contact us by phone. The call is free.
Phone: 1-877-912-8880 (TTY: 1-866-565-8576)
If you have any questions or concerns about our privacy statement, please contact us by:
Maximus Privacy Official Office
1891 Metro Center Drive
Reston, VA 20190