Privacy policy

Main Content

Maximus Privacy Policy

Effective Date: June 16, 2017

Our Commitment to Privacy

Thank you for visiting the Commonwealth Coordinated Care Plus (“CCC Plus”) Web site (the “Site”) operated by Maximus Health Services, Inc. (“Maximus”) for the Virginia Department of Medical Assistance Services. This Site is designed to make it easier for you to enroll and interact with VAEB online.

This privacy policy applies to personal information we collect about you and describes the types of information collected, how that information is used, and the choices users have about collection and use of this information. This privacy policy does not govern privacy practices associated with offline activities, websites other than this Site, or products and services not available or enabled via this Site, except as expressly set forth in this privacy policy.

Information We Collect

Most of the site is available without registering or providing personal information. But, in order to take advantage of some of our Site’s features, such as the enrollment application or requesting changes to existing plan enrollment, you may be asked to provide or verify personal information.

You provide this personal information voluntarily when you:

  • Register online using the Site and provide contact information
  • Submit an enrollment application.

We clearly identify data you must provide so we can deliver the services or information you have requested. Maximus may ask that you provide or verify the following personal information; the list is not exhaustive:

  • First and last name
  • Mailing address (including ZIP/Postal code)
  • County of residence
  • Medicaid ID number
  • Your Social Security Number
  • Date of birth

Maximus uses the information collected to process your enrollment. It is your choice whether to provide this information to us. Providing this information is optional, but failure to do so in some cases will limit the services available to you.

How We Use and Share the Information Collected

Except as stated in this privacy policy, Maximus will only collect or disclose personal information collected through this Site if you have agreed to the collection or disclosure of that personal information. Choosing to provide personal information to Maximus, whether we request it or not, constitutes consent to the collection and sharing of the information with the Virginia Department of Medical Assistance Services for the reasons you shared the information with Maximus. You can view the Virginia Department of Medical Assistance Services privacy policy at: http://www.dmas.virginia.gov/Content_atchs/atchs/web-policy.pdf.

Maximus does not share your personal information with unaffiliated third parties.

We may use your information to improve the content, navigation, and efficiency of the web site.

We may use and share with others aggregated or anonymous (not personally identifiable) information that we have collected based on Web usage data, surveys or statistical information that we have compiled about our users.

Web Privacy Statement

In addition, our web servers automatically collect and log web usage data from you when you visit the Site. This information, including your Internet Protocol (IP) address, referring sites, pages viewed, browser type, operating system, CPU speed, referring or exit web pages, and length of visit, informs us about how visitors use and navigate the Site.

Maximus will collect the information above from your visit to the Site only for these purposes and for purposes related to the services we provide on behalf of the Virginia Department of Medical Assistance Services.


Like most websites, we employ "cookies," "Web beacons," and similar devices to help you more efficiently use the Site and to track your activities. A cookie is small amount of data that is transferred to your browser by a Web server and can only be read by the server that gave it to you. It functions as your identification card and enables Maximus to record your activities and preferences. It cannot be executed as code or deliver viruses. Cookies from Maximus can only be read by Maximus websites. A Web beacon is a small transparent gif image that is embedded in an HTML page or e-mail used to track when the page or e-mail has been viewed. Maximus uses cookies and similar devices to track your use of the Site, types of Products and Services viewed and information downloaded, count visitors we receive daily, and our Web servers automatically log the IP/Internet address of your computer. Maximus does not generally use this information to identify you personally. If you do not want your browser to accept cookies, you can modify the cookie option in your browser’s settings. However, some Site features or services may not function properly or be accessible without cookies.

“Do Not Track” Signals

“Do Not Track" is a preference you can set in your web browser to let the websites you visit know that you do not want them collecting information about you. The Site does not currently respond to a "Do Not Track" or similar signals.


Maximus uses various technological and procedural security measures in order to protect the personal information we collect through the Site from loss, misuse, alteration or destruction. We have documented Information Security & Privacy policies to address dataWe regularly provide information security and privacy awareness training to our employees. However, you should be aware that, due to the open and unsecured character of the Internet, Maximus cannot be responsible for the security of transmissions of personal information over the Internet. We have prepared a formal incident response plan in case of a data breach.

To protect your communications through this web site, we authenticate, monitor, audit, and encrypt activity. You can tell when the site is secure by looking at the location (URL) field. If the URL begins with https:// (instead of http ://), the document comes from a secure server. This means your personally identifiable information cannot be read or deciphered by unauthorized individuals. This is part of our continuing commitment to protecting your information. Please note, that despite our efforts, no security measures are completely secure. Use of this system constitutes consent to such monitoring and auditing.


The Site is not directed towards children under 13 years of age, nor do we knowingly collect information from children under the age of 13.

Virginia Law

Maximus protects our records in accordance with our obligations as defined by applicable Virginia Statutes, including, but not limited to, the Government Data Collection and Dissemination Practices Act (Code of Virginia § 2.2-3800), and the Administration of systems including personal information; Internet privacy policy; exceptions (Code of Virginia § 2.2-3803), and any applicable U.S. Federal laws.


Our Site may contain links to other sites. Links do not imply endorsement by Maximus. Please be aware that these other sites are not subject to the Maximus privacy policy and we are not responsible for the privacy practices of such other sites. We recommend that you review the privacy policies of those sites when you visit them.

Reviewing and Correcting Your Information

We try to keep information about you accurate and current. To update or correct any personal information maintained by our program, please call us directly at 1-844-374-9159 (TTY: 1-800-817-6608). The call is free.

Changes to this Privacy Policy

We will occasionally update this privacy policy. When we do, we will revise the "last updated" date at the top of the privacy policy. Please check the Site from time to time for the most current version of our privacy policy. Your continued use of the Site after we have notified you of changes as described above constitutes your acceptance of the changes

How to Contact Us

If you have any questions or concerns about our privacy policy, please contact us.


1-844-374-9159 (TTY: 1-800-817-6608). The call is free.


Attn: Aubrey Lucy, Project Manager
P.O. Box 2029
Richmond, VA 23219