User login

Close
 

Marketing Involving Protected Health Information (PHI)

Effective Date:    December 2016

 

Policy Statement

 

The Columbia University Healthcare Component (CUHC) shall
not use or disclose Protected Health Information (PHI) for marketing purposes without the patient’s authorization unless it meets an exception permitted by applicable law.

 

Reason(s) for the Policy

 

Subject to certain exceptions, the Health Insurance
Portability and Accountability Act of 1996 (“HIPAA”) prohibits the use or disclosure of PHI for marketing purposes without patient authorization.  This Policy describes the procedures to use
or disclose PHI for marketing purposes.

 

Primary Guidance to Which This Policy Responds

 

HIPAA Rules  45 CFR 164.501, 164.508(a)(3)

http://www.hhs.gov/hipaa/for-professionals/privacy/guidance/marketing/

 

Responsible University Office & Officer

 

Office of HIPAA Compliance, Privacy Officer

 

 

To see the full text of this policy, please use the link on the right.