The California Consumer Privacy Act of 2018 (the “CCPA”) provides California residents certain rights regarding their Personal Information (as defined below) that we, Vituity® (Vituity is the trade name for CEP America, LLC and each of its member partnerships and subsidiaries, MedAmerica, Inc., and MedAmerica Billing Services, Inc.), collect about you the Consumer (as defined below).
The CCPA does not apply to the following categories of information:
- Medical information governed by:
- Confidentiality of Medical Information Act (CMIA)
- Health Insurance Portability and Accountability Act (HIPAA)
- Health Information Technology for Economic and Clinical Health Act (HITECH)
- Genetic Information Nondiscrimination Act (GINA)
- Privacy data covered by other regulations including:
- US Gramm-Leach-Bliley Act
- US Driver’s Privacy Protection Act
- California Financial Information Privacy Act
- Information collected by government entities
Categories of Personal Information Collected by Vituity
The categories of Personal Information collected by Vituity within the past 12 months may include:
Yes / No
|A. Identifiers||A real name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.||Yes|
|B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).||Any information that identifies, relates to, describes, or is capable of being associated with, a particular individual, including, but not limited to, his or her name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. “Personal information” does not include publicly available information that is lawfully made available to the general public from federal, state, or local government records.||Yes|
|C. Characteristics of protected Classification under California or federal law||Race, color, religion (includes religious dress and grooming practices), sex/gender (includes pregnancy, childbirth, breastfeeding and/or related medical conditions), gender identity, gender expression, sexual orientation, marital status, medical condition, military or veteran status, national origin, ancestry, disability, genetic information, request for family care leave, request for leave for an employee’s own serious health condition, request for Pregnancy Disability Leave, Retaliation for reporting patient abuse in tax-supporting institutions, Age (40 or older).||Yes|
|D. Commercial information||Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.||No|
|E. Biometric information||An individual’s physiological, biological, or behavioral characteristics, including an individual’s deoxyribonucleic acid (DNA), that can be used, singly or in combination with each other or with other identifying data, to establish individual identity. Biometric information includes, but is not limited to, imagery of the iris, retina, fingerprint, face, hand, palm, vein patterns, and voice recordings, from which an identifier template, such as a faceprint, a minutiae template, or a voiceprint, can be extracted, and keystroke patterns or rhythms, gait patterns or rhythms, and sleep, health, or exercise data that contain identifying information.||Yes|
|F. Internet or other electronic network activity||Activity including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an internet website, application, or advertisement.||Yes|
|G. Geolocation data||Physical location or movements||Yes|
|H. Sensory data||Audio, electronic, visual, thermal, olfactory, or similar information||No|
|I. Professional or employment-related information that is not publicly available.||Current or past job history or performance evaluations.||Yes|
|J. Education Information||Information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. Sec. 1232g; 34 C.F.R. Part 99).||Yes|
|K. Inferences||Information drawn from any of the personal information categories referenced above to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.||Yes|
How Vituity Obtains Personal Information
Vituity collects your Personal Information for recruitment, employment, personnel related and other business purposes.
How Vituity Obtains Personal Information
Vituity may obtain Personal Information either directly from you (forms you complete through our website or through other online communications with us) or indirectly from you (by tracking actions that you take on our website). We may also obtain Personal Information from third-party vendors who perform business services on our behalf.
Sharing Personal Information
Vituity may use or disclose Personal Information we collect for one or more of the following business purposes: to fulfill the reasons for which you provided the information; to provide, support and develop our website and services; to maintain the safety and security of our website and services; to respond to law enforcement requests and as required by applicable law, court order, or governmental regulations; and as described to you when collecting your Personal Information or as otherwise set forth in the CCPA.
Vituity may disclose your Personal Information to third-party service providers for business purposes including personnel-related functions such as payroll, benefits, recruiting and maintaining personnel records. We may also share your Personal Information with vendors to improve functionality across our websites.
In the preceding twelve (12) months, Vituity may have disclosed the following categories of Personal Information for a business purpose with your consent:
B. Personal Information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))
C. Characteristics of protected Classification under California or federal law
F. Internet or other electronic network activity
I. Professional or employment-related information that is not publicly available
J. Education Information
Sale of Personal Information
In the preceding twelve (12) months, Vituity has not “sold” Personal Information for any business or commercial purpose. However, the CCPA broadly defines “sale” in a way that may include using targeted advertising services to deliver targeted advertising about our services and programs. We use these advertising services which enable us to provide relevant content to you. Our use of these services may constitute a “sale” as defined by the CCPA of the following categories of information to advertising partners for such advertising purposes: Category A. Identifiers (i.e. Internet Protocol address, device IDs, cookie IDs, and advertising IDs.)
You have the right to direct us not to “sell” your Personal Information. (See Personal Information Sales Opt-Out below.)
Your Rights and Choices
The CCPA provides Consumers with specific rights regarding their Personal Information. This section describes your CCPA rights and explains how to exercise those rights.
Access to Specific Information and Data Portability Rights
You have the right to request access to your Personal Information that Vituity has collected over the past 12 months. Once we verify your Consumer request, we will disclose to you:
- The categories of Personal Information we collect and/or have collected about you.
- Our business or commercial purpose for collecting or selling that Personal Information.
- The categories of third parties with whom we share that Personal Information.
- The specific pieces of Personal Information we collect about you (also called a data portability request).
- If we “sold” or disclosed your Personal Information for a business purpose
Delete my Personal Information
You have the right to request that Vituity delete any of the Personal Information that we have collected from you subject to certain exceptions.
If we cannot comply with your request, we will explain the reasons why in our response.
Exercising Access, Data Portability, and Deletion Rights
Only you, or someone legally authorized to act on your behalf, may make a verifiable Consumer request related to your Personal Information.
If using a legally authorized agent, we reserve the right to require verification of your authorized agent’s identity and authority.
You may only make a verifiable Consumer request for access or data portability twice within a 12-month period. The verifiable Consumer request must:
- Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or their authorized representative. This may include proof of valid government-issued identification, attestation under penalty of perjury that you are a California resident, or other proof of identity acceptable to us at our sole discretion.
- Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to the request.
We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you.
We will only use Personal Information provided in a verifiable Consumer request to verify the requestor’s identity or authority to make the request.
Personal Information Sales Opt-Out
You have the right to direct us not to sell your Personal Information at any time (the “Right to Opt-Out”). Once you exercise your “Right to Opt-Out”, Vituity will wait at least twelve (12) months before asking you to reauthorize the sale of your Personal Information.
Timing and Format for Vituity’s Response
Vituity will respond to a verified Consumer requests within forty-five (45) days of its receipt. If we require more time to respond (up to 90 days), we will inform you in writing of the reason we need the extension period. All disclosures we provide will only cover the 12-month period preceding the receipt of the verified Consumer request. We do not charge a fee for verified Consumer requests, except for as provided by the CCPA.
Vituity does not knowingly collect Personal Information from children under the age of 13. If Vituity is made aware of collecting information from a child under 13, we will delete this information.
We will not discriminate against you for exercising any of your CCPA rights. Vituity will not charge you different prices for services, deny you services, provide you with different level of quality of services, or suggest that you receive a different price or rate for services or a different level of quality of services.
Last updated: September 18, 2020
Subscribe to receive the latest news and events.
We will get back to you shortly.