The Policy states that UnitedHealthcare may combine information collected through Online Services with offline data from internal and vendor sources and use or disclose the combined dataset for the purposes described in the Policy or for internal business purposes.
This analysis describes what UnitedHealthcare's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision authorizes data aggregation across online behavioral data, health and medical information, financial data, and offline records from vendors, which may produce enriched data profiles extending beyond what users submit directly through Online Services. The permissibility of such combination involving Protected Health Information is subject to HIPAA's minimum necessary and permissible use standards.
Interpretive note: The operational scope of permitted data combination depends on which specific vendor data sources are used and how HIPAA minimum necessary standards are applied to each combination use case, which is not specified in the document.
Under this clause, data collected through UnitedHealthcare's websites and mobile applications may be combined with offline records and vendor-sourced data to create enriched information profiles used for the purposes described in the Policy, including analytics, marketing, and service delivery. The categories of data that may be combined include health and medical information, financial data, and behavioral tracking data.
Cross-platform context
See how other platforms handle Data Combination from Online and Offline Sources and similar clauses.
Compare across platforms →"We may, when permitted, combine your Information with other information, whether online or offline, maintained or available to us from you or from other sources, such as from our vendors, and we may use and disclose combined data for the purpose described in this Section or for internal business purposes.Excerpt from UnitedHealthcare's Privacy Policy
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This provision authorizes data aggregation across online behavioral data, health and medical information, financial data, and offline records from vendors, which may produce enriched data profiles extending beyond what users submit directly through Online Services. The permissibility of such combination involving Protected Health Information is subject to HIPAA's minimum necessary and permissible use standards.
Under this clause, data collected through UnitedHealthcare's websites and mobile applications may be combined with offline records and vendor-sourced data to create enriched information profiles used for the purposes described in the Policy, including analytics, marketing, and service delivery. The categories of data that may be combined include health and medical information, financial data, and behavioral tracking data.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by UnitedHealthcare.