Students receiving health care services at The University of Alabama Student Health Center and Pharmacy (SHCP) have certain privacy rights granted by Alabama state law and by a federal law protecting the privacy of student education records called the Family Educational Rights and Privacy Act (FERPA). The purpose of this notice is to assure you of the SHCP’s compliance with these laws and to provide information about the confidentiality protections provided to you based on SHCP policy.
Policy on Confidentiality
SHCP policy is that only authorized SHCP personnel have the right to access your health information, and no disclosure is permitted to an employee unless it is necessary for that employee to perform his/her assigned SHCP duties. In addition, SHCP policy is that only authorized SHCP staff will release information from your health records. Your health information is confidential and generally may be released to third parties only:
- If you sign a written consent/authorization giving the SHCP permission to release (but you have the right to revoke that authorization at any time).
- Pursuant to a lawfully issued subpoena or judicial order after reasonable attempts to notify you, provided you maintain with us current contact information.
- If you have certain communicable diseases or have been exposed to certain communicable diseases, or where there is a foreseeable, real or probable risk of transmission of a contagious disease.
- In a health and safety emergency, but only to those individuals who can assist in resolving the emergency (and who are under a duty to not further disclose).
- To your parents if you are under the age of 19 and considered a minor in the state of Alabama, and/or if you are claimed as a dependent on one of your parent’s most recent tax returns (we will make a reasonable attempt to notify you of such disclosure and will not disclose if parental access to records has been prohibited by court order or state or federal statute).
- If the third party (person/company) is performing a function on behalf of the SHCP, which requires that it/they have access to your health information (but only if that company agrees to not further disclose the information except as permitted by law).
- The SHCP is directly transferring you to another health care facility.
- If you are a Medicare/Medicaid patient and information must be released to a third party insurer.
- If the law otherwise requires or permits your health information to be released.
Confidentiality Laws
Please be aware of the following Alabama laws regarding confidentiality of medical information:
- Alabama courts have imposed a duty on certain medical professionals not to reveal confidences obtained through their treatment relationship with you, although that duty does not apply to testimony in court. Because of duties parents of minors have regarding their children, the Alabama Attorney General has concluded that parents have a right to access their minor child’s psychological and medical records. (Ala. AG Opinion No. 1996-199). In Alabama, a minor is a person under the age of 19.
- Divorced Parents: Alabama Code § 30-3-154 provides that records (including mental health records) pertaining to a minor whose parents are divorced must be equally available to both parties in all types of custody arrangements. Generally, this means both parents get access unless parental rights have been terminated or the divorce decree states otherwise.
- HIV Infection: Alabama Code § 22-11A-54 require facilities like the SHCP to maintain confidentiality regarding medical test results with respect to the HIV infection or specific sickness or medical condition derived from such infection. That information may be released only as authorized by law.
- Sexually Transmitted Diseases: Alabama Code § 22-11A-22 requires that all information, reports and medical records concerning persons infected with sexually transmitted diseases designated by the Alabama State Board of Health shall be confidential and released on the written consent of the patient.
- Deceased or Mentally Incompetent Patient: A patient’s legal representative is entitled to access a patient’s medical records and sign an authorization for release of the patient’s records. The SHCP will either obtain a written agreement from the next of kin or a copy of the legal document proving that the legal representative is Executor of the Estate (Alabama Code § 43-8-41).
Right to Privacy
Except in limited circumstances, your student health records are also protected student education records under FERPA, and fall within the protections and rights set forth in the University’s Policy on Confidentiality of Student Records. The SHCP complies with both FERPA and Alabama state laws with respect to your privacy rights; consequently, medical records maintained by the University are afforded higher privacy protections than other types of student education records. For example, while the University may be able under FERPA to disclose your grades to your parent if you are a dependent for income tax purposes, the SHCP will generally not be able to disclose your medical information to your parents without your consent if you are of majority age. In that situation, if your parents are financially supporting your college education, you may want to consider signing an authorization for the SHCP to respond to questions from your parents about medical services provided and/or charges imposed on your student account.
Complaints
If you have a complaint about the disclosure of your SHCP records, direct your complaint to Sharon Jones, medical records specialist for the SHCP, 750 Peter Bryce Blvd., Tuscaloosa, Alabama 35401, phone: 205 348-4715. In addition, a student covered by FERPA may file a complaint if he or she believes the University has failed to comply with the requirements of FERPA. The University will not retaliate against you for making a complaint. Address such a complaint to: Family Policy Compliance Office, U. S. Department of Education, 400 Maryland Avenue, SW, Washington, DC 20202-4605, Telephone: (202) 260-3887, Fax: (202) 260-9001.
