User login


Marketing Involving Protected Health Information (PHI)

Effective Date:    November 2018


Policy Statement


The Columbia University Healthcare Component (CUHC) shall
not use or disclose Protected Health Information (PHI) for marketing purposes without the patient’s authorization unless it meets an exception permitted by applicable law.


Reason(s) for the Policy


Subject to certain exceptions, the Health Insurance
Portability and Accountability Act of 1996 (“HIPAA”) prohibits the use or disclosure of PHI for marketing purposes without patient authorization.  This Policy describes the procedures to use
or disclose PHI for marketing purposes.


Primary Guidance to Which This Policy Responds


HIPAA Rules  45 CFR 164.501, 164.508(a)(3)


Responsible University Office & Officer


Office of HIPAA Compliance, Privacy Officer



To see the full text of this policy, please use the link on the right.