Student Health Center confidentiality policy
All health records are strictly confidential and are considered protected health information. In compliance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the university’s HIPAA Compliance Program, only the appropriate Student Health Center personnel shall have access to protected health information.
The level of access to protected health information shall be determined by the information necessary to fulfill the employee’s official role within the Student Health Center. The IU Student Health Center must make reasonable efforts to limit the use and disclosure of protected health information to that which is minimally necessary to accomplish the intended purpose of the use, disclosure, or request of such information.
With exception to uses and disclosures that require an authorization under HIPAA, the Student Health Center may use or disclose protected health information for the purposes of treatment, payment, and/or health care operations. Any uses or disclosures beyond the definition or treatment, payment, or health care operations require the written authorization from the subject of the protected health information.
Parents, employers, university administrators and faculty, attorneys, and law enforcement officials, etc., have access to protected health information only with the patient’s written authorization or by a valid court order. The only exceptions to this policy will be in life-threatening or emergency situations and in accordance with state and federal laws.
Learn more about management of protected health information