Effective Date: December 2016
The Columbia University Healthcare Component (CUHC) shall
not use or disclose Protected Health Information (PHI) for marketing purposes without the patient’s authorization unless it meets an exception permitted by applicable law.
Reason(s) for the Policy
Subject to certain exceptions, the Health Insurance
Portability and Accountability Act of 1996 (“HIPAA”) prohibits the use or disclosure of PHI for marketing purposes without patient authorization. This Policy describes the procedures to use
or disclose PHI for marketing purposes.
Primary Guidance to Which This Policy Responds
HIPAA Rules 45 CFR 164.501, 164.508(a)(3)
Responsible University Office & Officer
Office of HIPAA Compliance, Privacy Officer
To see the full text of this policy, please use the link on the right.