HealthPlus Federal Credit Union PRIVACY DISCLOSURE

HealthPlus Federal Credit Union. IS COMMITTED TO MEETING ALL YOUR FINANCIAL NEEDS. TO DO SO, WE ARE SOMETIMES REQUIRED TO SHARE INFORMATION ABOUT YOU WITH OTHERS IN ORDER TO COMPLETE YOUR TRANSACTIONS OR TO PROVIDE CERTAIN FINANCIAL OPPORTUNITIES. TO PROTECT YOUR PRIVACY, WE HAVE ALWAYS LIMITED THE USE OF INFORMATION WE PROVIDE AND ONLY SHARED INFOMATION WITH COMPANIES THAT AGREE TO MAINTAIN YOUR PRIVACY. THESE COMPANIES ARE ALSO PROHIBITED FROM SHARING YOUR INFORMATION WE GIVE THEM WITH OTHER THIRD PARTIES.

YOUR FINANCIAL PRIVACY AND CONFIDENCE HAVE ALWAYS BEEN AND WILL ALWAYS REMAIN VERY IMPORTANT TO EVERY EMPLOYEE OF THE CREDIT UNION. AS REQUIRED BY LAW, THIS NOTICE EXPLAINS HOW WE COLLECT, USE AND SAFEGUARD YOUR PERSONAL FINANCIAL INFORMATION. IF AFTER READING THIS NOTICE YOU HAVE QUESTION, PLEASE CONTACT US AT 1-800-877-5956.

THE CREDIT UNION COLLECTS NONPUBLIC, PERSONAL INFORMATION ABOUT YOU FROM THE FOLLOWING SOURCES:

INFORMATION WE RECEIVE FROM YOU ON APPLICATIONS OR OTHER FORMS;
INFORMATION ABOUT YOUR TRANSACTIONS WITH US OR OTHERS ; AND
INFORMATION WE RECEIVE FROM A CONSUMER -REPORTING AGENCY.

WE MAY DISCLOSE ALL OF THE INFORMATION THAT WE COLLECT, AS DESCRIBED ABOVE.TO COMPANIES THAT PERFORM MARKETING SERVICES ON OUR BEHALF OR TO OTHER FINANCIAL INSTITUTIONS WITH WHOM WE HAVE JOINT MARKETING AGREEMENTS. WE MAY ALSO DISCLOSE INFORMATION ABOUT YOU UNDER OTHER CIRCUMSTANCES, AS PERMITTED OR REQUIRED BY LAW.

IF YOU DECIDE TO TERMINATE YOUR MEMBERSHHIP OR BECOME AN INACTIVE MEMBER, WE WILL ADHERE TO THE PRIVACY POLICIES AND PRACTICES DESCRIBED IN THIS NOTICE. THE CREDIT UNION RESTRICTS ACCESS TO YOUR PERSONAL AND ACCOUNT INFORMATION TO THOSE EMPLOYEES WHO NEED TO KNOW THAT INFORMATION TO PROVIDE PRODUCTS AND SERVICES TO YOU.. WE MAINTAIN PHYSICAL, ELECTRONIC AND PROCEDURAL SAFEGUARDS THAT COMPLY WITH FEDERAL REGULATIONS TO GUARD YOUR NONPUBLIC PERSONAL INFORMATION.

INTERNET SERVICE PROVIDER CONNECTIVITY AND RELIABILITY
THE CREDIT UNION WEB ACTIVITY IS ROUTED THROUGH YOUR LOCAL INTERNET SERVICE PROVIDER,YET THE WEBSITE ITSELF AND ALL OF OUR INFORMATION IS HOSTED BY EPL, INC. EPL'S NETWORK OPERATING CENTER FEATURES MULTIPLE HIGH-BANDWIDTH INTERNET CONNECTIONS AND REDUNDANT POWER PROTECTION. WE BELIEVE THAT THIS PROVIDES US ROBUST AND RELIALBLE WEB CAPABILITY. THE NETWORK OPERATING CENTER EPL PROVIDES IS A CONTROLLED ENVIRONMENT FEATURING PHYSICAL AND ELECTRONIC SECURITY MEASURES THAT INCLUDE HAND-SCANNING DIVICES, DIGITAL VIDEO SURVEILLANCE, MULTIPLE FIREWALL, AND ELECTRONIC INTRUSION DETECTION TECHNOLOGY. ITS TEAM OF SECURITY SPECIALISTS UNDERSTAND OUR CRITICAL BUSINESS NEED TO BE ABLE TO OFFER 24 X 7 WEB CAPABILITY TO OUR MEMBERS.

COMPUTER VIRUSES AND MALICIOUS SOFTWARE
WE ATTEMPT TO ENSURE THAT ALL FILES PROVIDED BY MSPHWFCU FOR VIEWING ON OUR WEBSITE ARE SCANNED FOR VIRUSES AND OTHER MALICIOUS SOFTWARE. EPL PROVIDES ANTI-VIRUS SOFTWARE ON OUR MAIL, WEB, AND APPLICATION SERVERS AS WELL AS ON ALL DESKTOPS. OUR REGULAR PROCEDURES CALL FOR REGULAR UPDATING OF VIRUS "SIGNATURE" FILES. IN ADDITION,EMERGENCY PROCEDURES DESIGNED TO CONTAIN ANY VIRUS OUTBREAKS ARE IN PLACE.

INTRUSION DETECTION CAPABILITIES AND FIREWALLS
INTRUSION DETECTION SYSTEMS ARE IN PLACE THROUGH WHICH EPL ATTEMPTS TO MONITOR ALL NETWORK TRAFFIC BOTH TO AND FROM THE INTERNET. THESE SYSTEMS ARE DESIGNED TO NOTE AND INTERCEPT OR BLOCK SUSPICIOUS ACTIVITES AS DEEMED APPROPRIATE. IN ADDITION, EPL'S NETWORKS ARE ALSO PROTECTED BY FIREWALLS WHICH FUTHER SERVE TO FILTER AND BLOCK SUSPICIOUS TRAFFIC THAT IS DETECTED.

DATA BACKUP AND RECOVERY PROCEDURE
OUR PROCEDURES REQUIRE THAT ALL PRODUCTION DATA BE BACKED UP ON A REGULARLY SCHEDULED BASIS. THE BACKUPS ARE DONE BY EPL. THE DATA BACKUP PROCESS IS AUTOMATED AND MONITORED FOR ANY ERROR SITUATIONS. OUR PROCEDURES CALL FOR EACH BACKUP TO BE COPIED AND STORED OFF-SITE IN A PROTECTED, CLIMATE CONTROLLED ENVIRONMENT. A LARGE SCALE RECOVERY TEST IS PERFORMED ANNUALLY. THE ANNUAL TESTS ARE CONDUCTED IN AN ATTEMPT TO ENSURE EACH CRITICAL BUSINESS PROCESS CAN BE RECOVERED IN A TIMELY BASIS. THE TEST IS ALSO CONDUCTED SO THAT WE CAN ATTEMPT TO ENSURE THAT THE RECOVERY PROCESS IS CORRECT AND THAT ALL OF THE TECHNOLOGY PLATFORMS AND COMMUNICATIONS BETWEEN EACH ARE OPERATING AS WE INTEND.

INDEPENDENT SECURITY ASSESSMENTS
HealthPlus Federal Credit Union AFFIRMS THAT EPL EMPLOYS THE SERVICES OF VARIOUS EXTERNAL CONSULTING AND AUDITING FIRMS TO ENSURE EPL MEETS INDUSTRY STANDARDS AND BEST PRACTICES FOR INFORMATION SECURITY. EPL IS COMPLIANT WITH ALL STATE AND FEDERAL REGULATIONS.