Health Insurance Portability & Accountability Act (HIPAA) Information

The Health Insurance Portability and Accountability Act of 1996 ("HIPAA") extends significant new privacy rights to our patients concerning the use or disclosure of their medical information. These rights are described in detail in the Columbia University Medical Center Notice of Privacy Practices posted below in English and Spanish.

CUMC Notice of Privacy Practices

• Notice of Privacy Practices (NPP)
  • Spanish Version (Versión en español)
• Patient Acknowledgement Form
  • Spanish Version (Versión en español)

HIPAA Forms

• Authorization to Release Medical Information (Legal)
  • Spanish Version (Versión en español)
• Business Associate Agreement
• HIPAA FAX Cover Sheet

Patients - Your HIPAA rights

• Request a Copy of your Medical Record
  • In Spanish - Request a Copy of your Medical Record
• Request an Accounting of Disclosures
• Request for an Amendment to Health Information
• Request for Communications at an Alternative Location or by an Alternative Means
• Request for Restrictions on Uses and Disclosures of Health Information
• Privacy Complaint Form
• Proxy Authorization for Patient Family Member & University Employees
• Provider/Patient Email information
• Patient Request for Email Communications

Other Resources

• US Department of Health & Human Services HIPAA website

Training

All CUMC employees must complete mandatory HIPAA training. All staff receive HIPAA training during welcome program/orientation.

HIPAA Education Material

• Welcome Program Orientation
  HIPAA – 2009
• HITECH Email Breach Notification Requirement
• Practice Managers Forum HITECH
• Nursing Students October 2009
• HIPAA Privacy and Security
• Management Update 2008
  
• Privacy Walk Through
• HIPAA Security
• Social Security Number Protection Act

- Physicians
Web Based Training
- Register with Irina 342-0059.

- Researchers
Anyone eligible to do Human Subjects Research must complete a one time HIPAA training posted on RASCAL under the Testing Center.