The RCAB Benefit Trusts and the RCAB Benefits Department are committed to keeping employee and beneficiary data secure for all of our benefit Plans. The Trusts are committed to full compliance with all requirements of HIPAA and the Massachusetts Data Security Law, as are the third-party vendors used to administer the various benefit Plans. Each of these vendors has data security protocols in place to protect participant privacy. For more information about the data security protocols of any specific vendor utilized by the RCAB Benefit Trusts, please contact us at benefits@rcab.org. As part of their annual audits and financial reviews, conducted by third-party audit firms, the Trusts examine the security policies and protocols of their vendors. In addition, the Benefits Department regularly reviews and re-trains staff on data security laws and policies. Below are copies of the Trusts’ HIPAA Policy, as amended, and its Written Information Security Policy.

For questions about employee and beneficiary data security or regarding HIPAA compliance, please contact the Benefits Department at benefits@rcab.org or (617) 746-5641.

• Health Insurance Portability and Accountability (HIPAA) Policy
• Amendments to HIPAA Policies and Procedures
• Written Information Security Program (WISP) --
  Electronic Data Security Policy