Confidentiality and HIPAA

Confidentiality and HIPAA

Security of confidential information is a social, legal, and ethical responsibility of organizations that receive medical information. UMD Health Services has adopted a policy to protect the confidentiality of patient data, whether electronic or printed and including financial information.

All patient records maintained by Health Services are private. Only authorized Health Services personnel may release patient records, and then, only with written authorization (download for fillable form) from the patient. Parents of patients eighteen years and older, parents of emancipated minors, spouses, and other next of kin will not have access to the medical record without the authorization of the patient.

For students attending UMD under the age of 18, consent is required from parents to use Health Services; if this pertains to you, please see the Minor Consent form.

The Overview of HIPAA Privacy and Security describes how medical information about a patient may be used and disclosed and how patients can get access to this information. Please view the Notice of Privacy Practices here.

Medical Records

Health Services abides by the following protocol with regard to the release of medical information:

  1. Each transfer of medical records requires written authorization (download for fillable form) signed by the patient. This form allows exchange of Counseling/Medical Records for one year.
  2. Consent for the release of medical information can be revoked at any time by providing UMD Health Services with a written statement specifically revoking the authorization.
  3. A copy of the authorization form will be provided to the patient upon his/her request.
  4. By authorizing the use or disclosure of information, there will be no conditions placed upon the patient's health care.
  5. Information disclosed by the authorization may be subject to re-disclosure by the recipient and no longer protected by Federal privacy regulations.

Health Care Directives

Have you thought about the care you'd like to receive if you are injured and cannot communicate your needs? Visit the MN Department of Health for information on Health Care Directives.

As a patient at UMD Health Services, you have choices, rights and responsibilities.

You have the Right:

  1. To health care regardless of age, race, gender, religion, disability, national origin, or sexual orientation.
  2. To be treated with dignity and respect.
  3. To know the names and professional status of people serving you.
  4. To privacy.
  5. To confidentiality.
  6. To receive accurate information about your health related concerns.
  7. To know the effectiveness, possible side effects, and problems of all forms of treatment.
  8. To participate in choosing a form of treatment.
  9. To receive education and counseling.
  10. To consent to, or refuse, care and/or treatment.
  11. To select and/or change your health care provider.
  12. To review your medical records with a clinician.
  13. To a second professional opinion regarding diagnosis or treatment.
  14. To information about services and related costs.
  15. To refuse to be a participant in research without jeopardy to future health care.
  16. To accurate marketing and advertising information.

You have the Responsibility:

  1. To seek medical attention promptly.
  2. To be honest about your medical history.
  3. To ask about anything you don't understand.
  4. To follow health advice and medical instruction.
  5. To report any significant changes in symptoms or failure to improve.
  6. To respect clinic policies.
  7. To keep appointments or cancel in advance.
  8. To seek non-emergency care during regular hours.
  9. To provide useful feedback about services and policies.
  10. To pay any charges billed to you.

Special thanks and credit to Creighton University for this model.