Requirement for Written Authorization
We will generally obtain your written authorization before using your health information or sharing it with others outside the hospital. You may also initiate the transfer of your records to another person by completing a written authorization form. If you provide us with written authorization, you may revoke that written authorization at any time, except to the extent that we have already relied upon it. To revoke a written authorization, please write to the Privacy Office:
Memorial Sloan-Kettering Cancer Center
Privacy Office
633 Third Avenue
New York, NY 10017
Exceptions to Written Authorization Requirement
There are some situations in which we do not need your written authorization before using your health information or sharing it with others. They are:
- Exception for Treatment, Payment, and Business Operations
We will only obtain your general written consent one time to use and disclose your health information to treat your condition, collect payment for that treatment, or run our business operations. In some cases, we may also disclose your health information to another healthcare provider or payor for its payment activities and certain of its business operations. For more information, see details in the Treatment, Payment & Business Operations section.
- Exception for Patient Directory and Disclosure to Family and Friends Involved in Your Care
We will ask you whether you have any objection to including information about yourself in our Patient Directory or sharing information about your health with your friends and family involved in your care. For more information, see details in the Patient Directory/Family & Friends section.
- Exception in Emergencies or Public Need
We may use or disclose your health information in an emergency or for important public needs. For example, we may share your information with public health officials at the New York State or city health departments who are authorized to investigate and control the spread of diseases. For more information, see details in the Emergencies or Public Need section.
- Exception If Information Is Completely or Partially De-identified
We may use or disclose your health information if we have removed any information that might identify you so that the health information is “completely de-identified.” We may also use and disclose “partially de-identified” information if the person who is to receive the information agrees in writing to protect the privacy of the information. For more information, see details in the Completely De-identified or Partially De-identified Information Section
How to Access Your Health Information
You generally have the right to inspect and copy your health information. For more information, see details in the How to Access Your Health Information section
How to Correct Your Health Information
You have the right to request that we amend your health information if you believe it is inaccurate or incomplete. For more information, see the Right to Amend section.
How to Identify Others Who Have Received Your Health Information
You have the right to receive an “accounting of disclosures,” which identifies certain persons or organizations to whom we have disclosed your health information in accordance with the protections described in this Notice of Privacy Practices. Many routine disclosures we make will not be included in this accounting, but the accounting will identify many non-routine disclosures of your information. For more information, see details in the Accounting of Disclosures section.
How to Request Additional Privacy Protections
You have the right to request further restrictions on the way we use your health information or share it with others. We are not required to agree to the restriction you request, but if we do, we will be bound by our agreement. For more information, see details in the Additional Privacy Protections section.
How to Request More-Confidential Communications
You have the right to request that we contact you in a way that is more confidential for you, such as at home instead of at work. We will try to accommodate all reasonable requests. For more information, see details in the Right to Request Confidential Communications section.
How Someone May Act on Your Behalf
You have the right to name a personal representative who may act on your behalf to control the privacy of your health information. Parents and guardians will generally have the right to control the privacy of health information about minors unless the minors are permitted by law to act on their own behalf.
How to Learn about Special Protections for HIV, Alcohol and Substance Abuse, Mental Health, and Genetic Information
Special privacy protections apply to HIV-related information, alcohol and substance abuse treatment information, mental health information, and genetic information. If you would like more information about these special protections, please contact the Privacy Office.
