Columbia University Health Services

This notice applies to all Health Services at Columbia (HSC) employees and volunteers. HSC values every patient's right to privacy, and will not release individually identifiable health information without your permission, unless such action is in accordance with state and federal law, or under the circumstances stated in this notice.

For a more comprehensive notice, please visit the HSC website. HSC reserves the right to change these practices at any time and to make new provisions effective for all confidential health information we maintain. In case of such amendment, we will post a revised notice on the HSC website. 

All HSC staff members are required to uphold your privacy in all settings. We have procedural and physical safeguards in place that protect your health information. As your health care provider we have the responsibility to:

• maintain the privacy of health information that identifies you
• provide you with a notice of our legal duties and privacy practices with respect to your health information
• abide by the terms of this notice
• notify you if we are unable to agree to a restriction you have requested in writing
• accommodate reasonable requests you make in writing to communicate health information by alternative means or alternative locations

As a patient of HSC, you consent that we use your health information for internal purposes to provide you with the best possible care. Confidential health information will be shared, without your authorization, to ensure appropriate:

Treatment   - to a provider, such as physicians, hospitals, and others who provide medical care and services to you

Payment - to an insurance company or other vendor responsible for paying your claims

Health Care Operations – that are intended to improve the quality of care through activities such as accreditation, quality assessment and training

HSC will also disclose health information for external purposes, without your authorization, to the following entities:

Public Health or Other Authority – in order to avert a serious threat to health or safety (for example, to report a contagious disease). Disclosure would only be to someone able to help prevent the threat or resolve the unsafe crisis. 

Government or Regulatory Body - a law enforcement agency to investigate a crime; in response to a judicial subpoena or other required legal proceeding; specialized government functions such as national security and intelligence activities; health oversight activities such as audits; or to report a victim of abuse, neglect or domestic violence when mandated by law

Professions Relating to Decedents - coroners, medical examiners, or funeral directors

Others as required by law – organ and tissue donor facilitation, authorized research purposes, and workers’ compensation or similar programs

Although your health record is the physical property of HSC, the information belongs to you. If you request a copy of your health record, one will be provided to you within ten business days.

Under federal law, you also have the right upon written request to:

• receive a paper copy of this notice of privacy practices
• appeal for a restriction on certain uses and disclosures of your information
• amend your health record, when inaccurate or incomplete
• obtain an accounting of certain disclosures of your health information
• receive confidential communication of your health information by alternative means or at alternative locations
• rescind your authorization to use or disclose health information except to the extent that action has already been taken

If you believe your privacy rights have been violated, you may file a complaint with Columbia   University or with the Secretary of the Department of Health and Human Services. If you have a question about this privacy notice or would like additional information, please contact:

Privacy Officer
Columbia   University   Medical   Center
601 West 168th Street, Apt. 22
New York , NY   10032
Email: HIPAA@columbia.edu