User login


Use and Disclosure of Protected Health Information

Effective Date: January 9, 2018


Policy Statement

Columbia University Healthcare Component (CUHC) has
established a process for a patient to file a privacy complaint. The patient also has a right to file a complaint related to a privacy policy without alleging a violation of their rights. 


Columbia University will mitigate to the extent possible any
harmful effect that is known or resulting from an unauthorized or improper access, use or disclosure of Protected Health Information (PHI).


Reason(s) for the Policy

To outline the mechanism for individuals to report complaints regarding privacy practices; including the process to respond to a complaint.


Primary Guidance to Which This Policy Responds

HIPAA Privacy Rule § 164.530 Administrative requirements

Responsible University Office & Officer

Office of HIPAA Compliance, Chief Privacy Officer


Revision History

Issued:  January 2018


Who is governed by This Policy

All Columbia University Healthcare Component (CUHC)
workforce members


Who Should Know This Policy

All CUHC workforce members



To see the full text of this policy, please use the link on
the right.