Skip to content
#Privacy Information for Students
#Privacy Information for Non-Students

 

EDGEWOOD COLLEGE HEALTH SERVICES PRIVACY INFORMATION for STUDENTS

This notice describes how health care information about you may be used and disclosed, and how you can get access to this information. Please review it carefully.

I. UNDERSTANDING YOUR HEALTH INFORMATION

Each time you visit, contact via phone, or send an electronic message to an Edgewood College Health Services (ECHS) health care provider a record is made. This record usually contains identification (including address, telephone numbers, etc.) and financial information as well as symptoms, diagnoses, test results, a description of a physical examination, and a treatment plan. This record is often referred to as your “medical record,” “mental health record” or “health information,” and may consist of both paper and electronic records.

Your health information is used:

• to plan for your care and treatment;

• for communication among your health care professionals;

• as a legal document describing the care you received;

• as a way for you or your insurance company to verify the services provided;

• to help ECHS health care providers review and improve health care and outcomes;

• as a source of information for important health research;

• to train health professionals and students;

• for other similar activities that allow ECHS to operate efficiently and provide you with quality care.

II. EDGEWOOD COLLEGE HEALTH SERVICES DUTY TO PROTECT YOUR HEALTH INFORMATION

The health care information of students maintained by ECHS is protected by a Federal law, the Family Educational Rights and Privacy Act (FERPA), and several state laws. Under FERPA, student health records maintained at ECHS are considered to be educational records. Neither your educational records nor your personally identifiable information may be disclosed without your written consent unless otherwise allowed by law.

The Health Insurance Portability and Accountability Act, also known as HIPAA, requires privacy

protection for health information (medical records) that is termed protected health information

(PHI).

Protected health information related to Edgewood College Health Service patients who are not college students falls under the privacy protection requirements of HIPAA. If you receive services from ECHS when you are not a student, please obtain the ECHS Notice of Privacy Practices. The protections required by HIPAA and FERPA are very similar. Wisconsin state law also requires some specific protections.

ECHS consists of Medical Services and Prevention Services, and provides quality health care.

In the course of providing health care, ECHS creates, maintains, uses, and may disclose your health information.

The purpose of this notice is to describe the privacy practices that ECHS will use related to your health information. Our privacy practices are intended to protect the confidentiality of the health information that specifically identifies or could be used to identify you. ECHS may change the terms of this notice if its privacy practices change or as federal or state requirements change. Each notice will have an effective date listed on the document. ECHS reserves the right to make the amended notice effective for any health information ECHS has at the time the change is made, as well as for future health information.

You may obtain a current copy of ECHS Privacy Information for Students on our web site http://health.edgewood.edu

III. HOW EDGEWOOD COLLEGE HEALTH SERVICES USES AND DISCLOSES YOUR HEALTH INFORMATION

In order to provide you with quality health care, Edgewood College Health Services needs to use and disclose your health information for many different reasons; to treat you, create and deliver bills for your treatment and other routine activities necessary to perform efficiently. All patients/clients are asked to sign authorization to disclose information for these treatments, payment, and operations functions at Edgewood College Health Services. Federal and state law also permit(s) ECHS to share this information with third parties who assist us in the performance of these routine functions. For some activities, federal and/or state law require(s) ECHS to obtain your written authorization.

Please note that Wisconsin law is more protective of certain health information than federal law. As required by state law, in most cases ECHS may not disclose your information related to treatment and HIV status without your specific written authorization.

The following examples do not refer to every way in which your health information could be used or disclosed. Edgewood College Health Services may use or disclose your health information in ways permitted by law that are not included in the examples below.

A. Uses and disclosures of your health information for the purpose of providing you with medical and mental health care without authorization

Providing you with treatment, collecting payment, and conducting health care operations are necessary activities for delivering health care. An example of what constitutes treatment, payment, and health care operations follow. Mental Health care transfer or requests of recovery outside of ECHS will require your authorization.

Treatment Examples:

• Your MEDICAL provider or staff member may have to disclose your health information (including all of your medical records) to another health care provider or use it if necessary to refer you for diagnosis, assessment, or treatment of your health condition Mental Health records will require an authorization for treatment outside of ECHS.

• Different departments of ECHS may use and disclose your health information to each other to coordinate activities such as coordinating your care and treatment, writing prescriptions, and ordering and viewing lab work and x‐rays.

• ECHS may disclose your medical information by phone, letter, fax, or computer to people not affiliated with ECHS who are involved in your medical care, such as your primary physician or in an emergency.

2. Payment Examples:

• ECHS may need to give your health insurance plan information about your visit in order to receive payment.

• ECHS may tell your health insurance plan about treatment to obtain approval or to determine whether your plan will pay for the treatment.

• ECHS may release your health information to workers’ compensation or similar programs that provide benefits for work‐related injuries or illness.

3. Health Care Operations Examples:

• Your health information may be used to review the performance and competence of physicians, counselors, and others involved in your care.

• Your health information may be used in ECHS training programs for health sciences students who will become future health care professionals.

• ECHS may use your health information for administrative activities, or for accreditation, certification, or licensing purposes. (Ex. quality improvement studies)

B. Other uses and disclosures of your information that do not require your authorization

There are some instances in which ECHS is permitted or required by law to use and disclose your information without your authorization. The following examples illustrate such disclosures.

1. Disclosures Required by Law

ECHS will disclose medical information about you when required to do so by federal or state laws.

2. Public Health Activities

ECHS may disclose medical information about you for public health purposes. For example:

• Reporting certain conditions such as communicable diseases for purposes of monitoring, preventing, and controlling disease; and

• Reporting reactions to medications or problems with health products and notifying people o health product recalls.

3. Victims of Abuse, Neglect, or Domestic Violence

ECHS is required by law to report any suspected abuse of a child, and is permitted to report suspected abuse of an adult. Usually, ECHS will report suspected abuse of an adult only with the person’s consent.

4. Health Oversight Activities

ECHS may need to disclose health information to agencies that monitor our compliance with state and federal laws.

5. Judicial and Administrative Proceedings

If you are involved in a lawsuit or a dispute ECHS may disclose medical and mental health information about you in response to a judicial order or lawfully issued subpoena.

6. Law Enforcement

ECHS may disclose health information about you to law enforcement officials in response to a court order or other similar process allowed by law in order to identify or locate a suspect, fugitive, material witness, or missing person; or to report or respond to a crime.

7 . Coroners and Medical Examiners

ECHS may disclose health information to a coroner or medical examiner for the purposes of identifying a deceased person or determining a cause of death.

8. Appointment Reminders/ Additional Communications

ECHS may use your health information to call you, contact you electronically, or send a letter reminding you of an upcoming appointment. ECHS may also use your information to call you or send the results of tests or to convey other health communications.

9. Research

Under certain circumstances, ECHS may use and disclose your health information for research purposes, which may include contacting you about participation in research projects. A research oversight committee exists to protect the rights of all research participants, including their privacy and confidentiality rights.

10 . Serious Threat to Health or Safety

ECHS may use and disclose your health information when necessary to prevent a serious threat to your health and safety or the health and safety of others.

11 . Specific Government Functions

If you are a member of the armed forces, ECHS may disclose your health information, under certain circumstances, to military authorities to assist with a military mission.

12 . Communicating Additional Services Provided by ECHS

Under certain conditions, ECHS may use your health information to inform you of additional or health related services it has to offer.

C. Uses and disclosures of your health information requiring your authorization

If ECHS needs to use or disclose your health information for any purpose not listed in this brochure or not otherwise permitted by law, ECHS must first obtain your written authorization Even if you authorize ECHS to use or disclose your information for a particular purpose, you ma revoke your authorization at any time.

D. Requirements to report crime statistics

State and federal laws require some employees of the College to provide data to campus officials about crimes that occur on or near campus, or that affect members of the campus community, including students and employees. ECHS will only provide aggregate data, and will not provide any information that identifies you without your permission.

IV. YOUR RIGHTS AS A PATIENT OF EDGEWOOD COLLEGE HEALTH SERVICES

As a patient/client of ECHS, you have the following rights with regard to your health information.

A . Right to request how you will be contacted

It is ECHS normal practice to communicate with you at either your home address and home phone number or via secure message through about health matters, such as appointment reminders and the results of lab tests. Sometimes ECHS may leave messages on your voicemail. You have the right to request that ECHS communicate with you in a different way. For example, you may request that ECHS only communicate with you by mail to a particular address. ECHS will agree to reasonable requests.

B. Right to inspect and copy your health records and billing records

You have the right to inspect and obtain a copy of your information contained in ECHS billing and health records. ECHS may deny your request to inspect and copy under limited circumstances. To request access to your billing or health information, contact the budget and finance or the health record department at the ECHS location where you receive care. If you as for a copy of any information, ECHS may charge a reasonable fee for the costs of copying, mailing, and supplies.

C. Right to add information to correct or amend your health and billing records

If you feel that information contained in your health or billing records is incorrect or incomplete, you may ask ECHS to add information to correct the record.

D. Right to request restrictions and uses and disclosures of your health information

Federal and state law says you have the right to ask for restrictions on certain uses and disclosures of your health information. Federal law also says that ECHS is not required to agree to such restrictions except as noted below. Because of the number, complexity, and nature of the services we deliver, ECHS cannot make any formal commitment under federal or state law agree to such requests. However, outside of federal law, in rare circumstances, informal arrangements for limited restrictions may be worked out with you.

ECHS must agree to a request to restrict disclosures of private health information to a health plan if the disclosure is for the purpose of carrying out payment or health care operations and the private health information pertains solely to a service or item for which you or another entity other than the health plan has paid ECHS in full.

V. CONTACT AND COMPLAINT INFORMATION

A. Contact information

 

If you have any question or concerns regarding the information in this notice please contact:

B. Complaints

If you believe that anyone at ECHS has violated your privacy rights, you may contact the Dean of Students office at (608) 663-2212.

EDGEWOOD COLLEGE HEALTH SERVICES NOTICE OF PRIVACY PRACTICES FOR NON-STUDENTS

This notice describes how medical information about you may be used and disclosed, and how you can get access to this information. Please review it carefully.

I. UNDERSTANDING YOUR HEALTH INFORMATION

Each time you visit, contact via phone, or send an electronic message to Edgewood College Health Services (ECHS) health care provider (physician, nurse, psychologist, etc.), a record of your visit is made. This record usually contains identification (including address, telephone numbers, etc.) and financial information as well as symptoms, diagnoses, test results, a description of a physical examination, and a treatment plan. This record is often referred to as your “medical record,” or “health information,” and may consist of both paper and electronic records.

Your health information is used:

• to plan for your care and treatment;

• for communication among your health care professionals;

• as a legal document describing the care you received;

• as a way for you or your insurance company to verify the services provided;

• to help ECHS health care providers review and improve health care and outcomes;

• as a source of information for important health research;

• to train health professionals and students;

• for other similar activities that allow ECHS to operate efficiently and provide you with quality care.

II. EDGEWOOD’S DUTY TO PROTECT YOUR HEALTH INFORMATION

The Health Insurance Portability and Accountability Act, also known as HIPAA, requires privacy protection for health information (medical records) that is termed protected health information (PHI). PHI is health information or health care payment information including demographic information collected from individual patients. It is information that identifies the individual or could be used to identify the individual. Protected health information related to ECHS patients who are not college students falls under the privacy protection requirements of HIPAA. Wisconsin state law also requires some specific protections.

ECHS provides quality health care, trains future health care professionals (such as doctors, nurses).

In the course of providing health care, training health care professionals, and conducting health sciences research, ECHS creates, maintains, uses, and may disclose your health information. The purpose of this notice is to describe the privacy practices that ECHS will use related to your health information. Our privacy practices are intended to protect the confidentiality of the health information that specifically identifies or could be used to identify you.

ECHS may change the terms of this notice if its privacy practices change or as federal or state requirements change. Each notice will have an effective date listed on the document. ECHS reserves the right to make the amended notice effective for any health information ECHS has at the time the change is made, as well as for future health information.

You may obtain a current copy of our Notice of Privacy Practices at the registration desk or on our web site: http://health.edgewood.edu

III. HOW ECHS MAY USE AND DISCLOSE YOUR HEALTH INFORMATION

ECHS uses and discloses your health information for many different reasons, most of which are necessary to provide you with quality health care services. Federal and state law does not require ECHS to get your permission to perform many routine functions, especially those activities necessary to treat you, create and deliver bills for your treatment, and other routine activities necessary to perform efficiently. Federal and state law also permit(s) ECHS to share this information with third parties who assist us in the performance of these routine functions without your permission. For some other activities, federal and/or state law require(s) ECHS to obtain your written authorization.

Please note that Wisconsin law is more protective of certain health information than federal law. As required by state law, in most cases ECHS may not disclose certain portions of your information related to treatment for and HIV status without your specific written authorization.

The following examples do not refer to every way in which your health information could be used or dis-closed. ECHS may use or disclose your health information in ways permitted by law that are not included in the examples below.

A. Uses and disclosures of your health information for the purpose of providing you with medical and mental health care without authorization

Providing you with treatment, collecting payment, and conducting health operations are necessary activities for delivering health care. State and federal law permit ECHS to use and disclose your health information for these purposes. Examples of what constitute treatment, payment, and health care operations follow. Mental Health care transfer or requests of records outside of ECHS will require your authorization.

1. Treatment Examples:

• Your MEDICAL provider or staff member may have to disclose your health information (including all of your medical records) to another health care provider or use it if necessary to refer you for diagnosis, assessment, or treatment of your health condition.

• ECHS may disclose your medical health information by phone, letter, fax, or computer to people not affiliated with ECHS who are involved in your medical care, such as your primary physician.

2. Payment Examples:

• ECHS may need to give your health insurance plan information about your visit in order to receive payment.

• ECHS may tell your health insurance plan about treatment to obtain approval or to determine whether your plan will pay for the treatment.

3. Health Care Operations Examples:

• Your health information may be used to review the performance and competence of physicians, counselors, and others involved in your care.

• Your health information may be used in ECHS training programs for health sciences students who will become future health care professionals.

• ECHS may use your health information for administrative activities, or for accreditation, certification, or licensing purposes. (Ex. quality improvement studies)

B. Other uses and disclosures of your information that do not require your authorization

There are some instances in which ECHS is permitted or required by law to use and disclose your information without your authorization. The following examples illustrate such disclosures.

1. Disclosures Required by Law

ECHS will disclose medical information about you when required to do so by federal or state laws.

1. Public Health Activities

ECHS may disclose medical information about you for public health purposes. For example:

• Reporting certain conditions such as communicable diseases for purposes of monitoring, preventing, and controlling disease; and

• Reporting reactions to medications or problems with health products and notifying people of health product recalls.

2. Victims of Abuse, Neglect, or Domestic Violence

ECHS is required by law to report any suspected abuse of a child, and is permitted to report suspected abuse of an adult. Usually, ECHS will report suspected abuse of an adult only with that person’s consent.

3. Health Oversight Activities

ECHS may need to disclose health information to agencies that monitor our compliance with state and federal laws.

4. Judicial and Administrative Proceedings

If you are involved in a lawsuit or a dispute, ECHS may disclose medical and mental health information about you in response to a judicial order or lawfully issued subpoena.

5. Law Enforcement

ECHS may disclose health information about you to law enforcement officials in response to a court order or other similar process allowed by law in order to identify or locate a suspect, fugitive, material witness, or missing person; or to report or respond to a crime.

6. Coroners and Medical Examiners

ECHS may disclose health information to a coroner or medical examiner for the purposes of identifying a deceased person or determining a cause of death.

7. Appointment Reminders/ Additional Communications

ECHS may use your health information to call you, contact you electronically, or send a letter reminding you of an upcoming appointment. ECHS may also use your information to call you or send the results of tests or to convey other health communications.

8. Research

Under certain circumstances, ECHS may use and disclose your health information for research purposes, which may include contacting you about participation in research projects. A research oversight committee exists to protect the rights of all research participants, including their privacy and confidentiality rights.

9. Serious Threat to Health or Safety

ECHS may use and disclose your health information when necessary to prevent a serious threat to your health and safety or the health and safety of others.

C. Specific Government Functions

If you are a member of the armed forces, ECHS may disclose your health information, under certain cir-cumstances, to military authorities to assist with a military mission.

12. Workers’ Compensation

ECHS may release your health information to workers’ compensation or similar programs that provide benefits for work-related injuries or illness.

13. Communicating Additional Services Provided by ECHS

Under certain conditions, ECHS may use your health information to inform you of additional or health-related services it has to offer.

C. Uses and disclosures of your health information that you may object to or refuse

Listed below are examples of ways ECHS may use or disclose your health information without your authorization unless you refuse or object.

1. Information Disclosed to Family Members, Close Friends, or Others

To coordinate your care and explain your condition and treatment plan, ECHS may disclose health information about you to your family or close personal friends. You have the right to object to these kinds of disclosures. In an emergency situation, ECHS will exercise its professional judgment to determine if family or friends should receive information about you. As a general policy, ECHS does not disclose information to family members, close friends, or others without consent.

2. Notification

Unless you object, ECHS may use your health information to notify, or assist in notifying, members of your family, close personal friends, or any other people responsible for your care about your condition, location, or death.

3. Disaster Relief

Unless you object, ECHS may also disclose your health information to an organization authorized to assist in disaster relief efforts so that loved ones can receive information about your location and health status.

To obtain further information on how to refuse or object, please contact the Edgewood College Privacy Manager at 1000 Edgewood College Drive, Madison, WI 53711; (608) 663-4861.

D. Uses and disclosures of your health information requiring your authorization

If ECHS needs to use or disclose your health information for most other purposes not listed in this brochure, ECHS must first obtain your written authorization. Some examples that require your authorization would be for marketing, psychotherapy records or sale of PHI. Even if you authorize ECHS to use or disclose your information for a particular purpose, you may revoke your authorization.

E. Requirements to report Crime Statistics

State and federal laws require some employees of the college to provide data to campus officials about crimes that occur on or near campus, or that affect members of the campus community, including students and employees. ECHS will only provide aggregate data, and will not provide any information that identifies you without your permission .

IV. YOUR RIGHTS AS A PATIENT/CLIENT OF ECHS

As a patient of ECHS, you have the following rights with regard to your health information:

A. Right to request how you will be contacted

It is ECHSs’ normal practice to communicate with you at your home address and home phone number or through secure message through our patient portal about health matters, such as appointment reminders and the results of lab tests. Sometimes ECHS may leave messages on your voicemail. You have the right to request that ECHS communicate with you in a different way. For example, you may request that ECHS only communicate with you by mail to a particular address. ECHS will agree to reasonable requests.

To request an alternative method of communication, please contact the privacy manager at 1000 Edgewood College Drive, Madison, WI 53711; (608) 663-4861. Please note, however, that if you request communications in an alternative manner, all future communications initiated by ECHS will be made in that manner.

B. Right to inspect and copy your health and billing records.

You have the right to inspect and obtain a copy of your information contained in ECHS’ billing and health records. ECHS may deny your request to inspect and copy under limited circumstances. To request access to your billing or health information ECHS.

ment at the ECHS location where you receive care. If you ask for a copy of any information, ECHS may charge a reasonable fee for the costs of copying, mailing, and supplies.

C. Right to add information to correct or amend your health and billing records

If you feel that information contained in your health or billing records is incorrect or incomplete, you may ask ECHS to add information to correct the record. ECHS will make a decision on your request within 60 days, or in some cases, within 90 days. Under certain circumstances, ECHS may deny your request to add information. To request an addition to your billing or health records, you must contact the budget and finance or the health record department at the ECHS location where you receive care. ECHS may require you to submit your request in writing and to provide an explanation concerning the reason for your request.

D. Right to an accounting of disclosures

You have the right to request an “accounting of disclosures,” which is a list of certain disclosures of your health information by ECHS. This list will not include:

• disclosures made to carry out treatment, payment, and health care operations;

• disclosures made to you;

• disclosures made with your authorization;

• disclosures to family or friends involved in your care, to disaster relief organizations, or to notify those involved in your care of your location in ECHS health facilities and your health status; or

• disclosures made before April 14, 2003.

ECHS will make a decision on your request for an accounting within 60 days, or in some cases, 90 days of receipt of your request and will provide you with further information about your rights if the request is denied.

ECHS must provide you an accounting of disclosures free of charge once in any 12 month period. ECHS may charge you for the costs of providing you with the list more than once in a 12 month period.

To request an accounting of disclosures, you must make your request to the medical record department at the ECHS location where you receive care.

E. Right to a paper copy of this notice

You have the right to obtain a paper copy of the most current ECHS Notice of Privacy Practices upon request within a reasonable amount of time, even if you have received a copy of the notice electronically.

F. Right to request restrictions on uses and disclosures of your health information

Federal and state law says you have the right to ask for restrictions on certain uses and disclosures of your health information. Federal law also says that ECHS is not required to agree to such restrictions except as noted below. Because of the number, complexity, and nature of the services we deliver, ECHS cannot make any formal commitment under federal or state law to agree to such requests. However, outside of federal law, in rare circumstances, informal arrangements for limited restrictions may be worked out with you.

ECHS must agree to a request to restrict disclosures of PHI to a health plan if the disclosure is for the purpose of carrying out payment or health care operations and the PHI pertains solely to a service or item for which you or another entity other than the health plan has paid ECHS in full.

G. ECHS must notify you following a breach of your unsecured PHI.

V. CONTACT AND COMPLAINT INFORMATION

A. Contact information

If you have any question or concerns regarding the information in this notice please contact:

Edgewood College

Privacy Manager

1000 Edgewood College Drive

Madison, WI 53711

(608) 663-8334

B. Complaints

If you believe that anyone at ECHS has violated your privacy rights, you may call the ECHS Privacy Manager and discuss your concerns. If you are not satisfied with the outcome, ECHS will provide you with information on how to contact the UW–Madison privacy officer and Department of Health and Human Services, when applicable. ECHS will take no action against you if you make a complaint to either.

Notice effective April 14, 2003

Revised August 22, 2016