This Consumer Health Data Privacy Policy (“Policy”) describes how AXIS Capital Holdings Limited and its affiliates (“AXIS” or the “Company” or “we” or “us” or “our”) Process the Consumer Health Data of Washington Consumers pursuant to the Washington My Health My Data Act (the “Washington Act”).

Depending on your relationship with us, your personal data may be covered by one of the following privacy policies and notices:

  • Global Privacy Notice, which covers personal information collected, used, and disclosed about individuals in all locations where AXIS conducts business unless there is a specific Privacy Notice for that jurisdiction.
  • HIPAA Privacy Notice, which covers protected health information collected, used, and disclosed under the Health Insurance Portability and Accountability Act
  • GLBA Privacy Notice, which covers nonpublic personal information collected, used, and disclosed under the Gramm-Leach-Bliley Act

In the event of a conflict between any other policy, statement, or notice and this Policy, this Policy will prevail as to Consumer Health Data Collected under the Washington Act.

Capitalized terms that are not otherwise defined in this Policy shall be defined as they are in the Washington Act.

I. Consumer Health Data Collected

“Consumer Health Data” means personal information that is linked or reasonably linkable to a Washington Consumer and that identifies the Washington Consumer's past, present, or future physical or mental health status. Consumer Health Data does not include Publicly Available Information or Deidentified Data.

AXIS Collects the following categories of Consumer Health Data about Washington Consumers for the limited purposes described below:

  • Individual health condition, treatment, disease, or diagnosis information
  • Social, psychological, behavioral, and medical intervention information
  • Health-related surgery or procedure information
  • Use or purchase of prescribed medication information
  • Bodily function, vital sign, symptoms, or measurement of physical or mental health status information
  • Diagnosis or diagnostic testing, treatment, or medication information
  • Data that identifies a Washington Consumer seeking Health Care Services
  • Information Processed to associate or identify a Washington Consumer with the data listed above that is derived or extrapolated from non-health information

II. Consumer Health Data Collection and Use Purposes

AXIS Collects and uses the Consumer Health Data of Washington Consumers described above to the extent necessary to provide a product or service requested by the Washington Consumer or with the Washington Consumer’s Consent, including to:

  • Provide the services requested by Washington Consumers, including underwriting and Processing claims; and
  • Prevent, detect, protect against, and respond to security incidents, identity theft, fraud, harassment, malicious or deceptive activities, or any activity that is illegal under Washington state or federal law; preserve the integrity and security of our systems; and investigate, report, or prosecute those responsible for any illegal action under Washington state or federal law.

III. Sources of Consumer Health Data

AXIS may obtain the Consumer Health Data described above from the following sources:

  • Directly from you or your representative
  • From your family members
  • From your employer
  • From individuals involved in making a commercial claim, including lawyers, witnesses, experts, and adjusters
  • From government entities
  • Drawn from the other categories of Personal Information we Collect

IV. Sharing and Disclosing Consumer Health Data

AXIS Shares the Consumer Health Data of Washington Consumers to the extent necessary to provide a product or service requested by the Washington Consumer or with the Washington Consumer’s Consent, including to:

  • Insurance institutions, agents, insurance-support institutions, and self-insurers
  • Group policyholders
  • Vendors such as brokers, other insurers or reinsurers, credit reference agencies, claims administrators, adjusters and other claims experts

We Share Consumer Health Data among our Affiliates to conduct our operations and provide services to Washington Consumers. These Affiliates include: AXIS Group Benefits (Arizona); AXIS Specialty Insurance Company (Connecticut); AXIS Group Services, Inc. (Delaware); AXIS Specialty Finance LLC (Delaware); AXIS Specialty U.S. Holdings, Inc. (Delaware); AXIS Specialty U.S. Services, Inc. (Delaware); AXIS Specialty Underwriters, Inc. (Delaware); AXIS Insurance Company (Illinois); AXIS Surplus Insurance Company (Illinois); AXIS Reinsurance Company (New York); AXIS Managed Agency Limited; AXIS UK Services Limited; AXIS Underwriting Limited; AXIS Corporate Capital UK II Limited; AXIS RE SE; and AXIS Specialty Europe SE.

V. Consumer Health Data Rights

Washington Consumers have the right to submit certain requests relating to your Consumer Health Data as described below. To exercise your privacy rights, please submit a request at [email protected].

Any privacy rights request you submit to us is subject to a verification process. We will not fulfill your request unless you have provided sufficient information for us to reasonably verify you are the Washington Consumer about whom we Collected Consumer Health Data. Please follow the instructions on our website and promptly respond to any follow-up inquires so that we may confirm your identity.

We do not sell Consumer Health Data.

If you choose to exercise any of your privacy rights under the Washington Act, we will not discriminate against you.

HOW TO CONTACT US

Please address all inquiries, requests, and other communications regarding your personal information or this Privacy Notice to:

Contact: Data Protection Officer Email: [email protected] Address: 10000 Avalon Boulevard, Suite 200, Alpharetta, GA 30009 Phone: 1 888 914 9661, PIN 292703

Published: 31 March 2024 v1.0