Benefit Plans Administrative Services BPAS 3/9/2020

(11) Utilization review, including pre-certification, preauthorization, concurrent review and retrospective review; (12) Disclosure to consumer reporting agencies related to the collection of premiums or reimbursement (the following PHI may be disclosed for payment purposes: name and address,date of birth,Social Security number,payment history,account number and name and address of provider and/or health Plan); and (13) Reimbursement to the Plan. (b) Health care operations include, but are not limited to, the following activities: (1) Quality assessment; (2) Population-based activities relating to improving health or reducing health care costs, protocol development, case management and care coordination, disease management,contacting health care providers and patients with information about treatment alternatives and related functions; (3) Rating provider and Plan performance, including accreditation, certification, licensing or credentialing activities; (4) Underwriting, premium rating and other activities relating to the creation, renewal or replacement of a contract of health insurance or health benefits, and ceding, securing or placing a contract for reinsurance of risk relating to health care claims (including stop-loss insurance and excess of loss insurance); (5) Conducting or arranging for medical review, legal services and auditing function, including fraud and abuse detection and compliance programs; (6) Business planning and development, such as conducting cost-management and planning-related analyses related to managing and operating the Plan, including formulary development and administration, development or improvement of payment methods or coverage policies; (7) Business management and general administration activities of the Plan, including, but not limited to: a. Management activities relating to the implementation of and compliance with HIPAA's administrative simplification requirements; b. Customer service, including data analyses for policyholders; (8) Resolution of internal grievances; and (9) Due diligence in connection with the sale or transfer of assets to a potential successor in interest, if the potential successor in interest is a covered entity under HIPAA or following completion of the sale or transfer,will become a covered entity. 7.2 Adopting Employer's Obligations under the Privacy Rules. Under the Privacy Rules, the Plan may not disclose PHI to the Adopting Employer unless the Adopting Employer certifies that the Plan document has been amended to provide that the Plan will make such disclosures only upon receipt of a certification from the Adopting Employer that the Plan has been amended to ©2017 Hitesman&Wold,P.A. 22 Funded Post-Employment HRA Basic Plan Document(Single Employer Non-ERSA)