What Happened?

On February 21, 2024, Change Healthcare Inc. (CHC), a service provider to Cincinnati Children’s and many other healthcare organizations in the U.S., identified a deployment of ransomware in its computer system. CHC took steps to stop the attack and contacted law enforcement, but healthcare data was compromised. On April 22, 2024, CHC confirmed the impacted data could cover a substantial proportion of people in America.

Was Your Data Affected?

CHC is reviewing the impacted data containing protected health information (PHI) and is notifying affected customers and individuals. So far, Cincinnati Children’s has NOT been notified that any PHI involving our patients was affected. However, CHC has posted a HIPAA Substitute Notice to provide more information on the incident, information on protecting your privacy, and information on enrolling in complimentary credit monitoring and identity theft protection services for individuals concerned their data may have been affected. We encourage you to review this information.  

Where Can You Get More Information?

Additional information on the incident and enrolling in CHC’s offered services can be found at www.changecybersupport.com or by calling 1-866-262-5342.

CHC’s complete HIPAA Substitute Notice can be found at www.changehealthcare.com/hipaa-substitute-notice.

We will continue to monitor for additional updates from CHC.

This notice describes how information about you may be used and disclosed and how you can get access to this information. We follow the law as mandated in the Health Insurance Portability and Accountability Act (HIPAA).

What is This Notice and Why is it Important?

Cincinnati Children’s Hospital Medical Center (Cincinnati Children’s) is required by law to maintain the privacy of patient protected health information, provide patients with notice of our legal duties and privacy practices regarding protected health information, and notify individuals when a breach of unsecured protected health information occurs. We understand that your health information is highly personal. We are committed to safeguarding your privacy.

Please read this Notice thoroughly. It describes how we may use and disclose your protected health information for treatment, payment, and health care operations purposes, and for other purposes that the law allows. It also describes your legal right to access and control the use and disclosure of your protected health information.

The rights outlined below belong to the patient or the patient’s personal representative, which is the patient’s parent, legal guardian or any person that has the legal authority to represent the interests of the patient and act on the patient’s behalf. If there is any question as to whether a person is legally qualified to act as a patient’s personal representative, please contact the Privacy Officer at the phone number or address listed at the end of this Notice.

What Does This Notice Cover?

This Notice covers information about your health condition, health care treatment, or payment for health care treatment that could reasonably identify who you are. It includes information in the possession of any Cincinnati Children’s department or division. This Notice applies to all personnel, volunteers, contractors, or anyone working here who might have access to your health information.

We have an Organized Health Care Arrangement Agreement with our Medical Staff, which makes this Notice and the rights and obligations contained herein, applicable to both Cincinnati Children's and to our Medical Staff when they are providing services to patients here.

How Will Cincinnati Children's Use My Health Information?

We are permitted to use or disclose to others outside Cincinnati Children’s your health information without permission from you for three basic types of activities:

Treatment

We are permitted to use your health information or disclose it to others outside Cincinnati Children’s to provide proper medical care to you. This means we can provide your health information to nurses, technicians, doctors, medical students, or outside laboratories involved in your care.

For example, dietitians may need to know your condition if it requires special meals; X-ray and laboratory technicians may need to know your condition to conduct the proper test; other physicians may need to have your information to advise those providing your care.

In some circumstances, we may require you to complete an Authorization form for disclosure of your protected health information to an outside health care provider.

Payment

We are permitted to use your health information or disclose it to others outside Cincinnati Children’s to submit bills for the care and services you receive.

For example, information about your care or services may be sent to your insurance company, a government insurance program, or another company that processes the information and submits it for payment

We may also provide information to your health plan about treatment you may receive so they may determine whether you are covered for that care.

Healthcare Operations

We are permitted to use your health information or disclose it to others outside Cincinnati Children’s in order to run the hospital and ensure high quality care.

For example, we may use or disclose your information to review how we provide care to you, help us improve how we operate the hospital, meet compliance or licensing requirements, or send you appointment reminders.

There are some other situations in which we may use your information or disclose it to others outside Cincinnati Children’s without a written authorization from you, such as:

Treatment Alternatives

We may use or disclose your health information to tell you about or recommend possible treatment-related options, activities, or alternatives that may be helpful to you.

Health-Related Benefits and Services

We may use or disclose your health information to tell you about health-related benefits or services that may be of interest to you.

Fundraising Activities

We may contact you to raise funds for Cincinnati Children’s, and you have the right to opt out of receiving fund-raising communications. We may use or disclose your health information to contact you for fundraising activities for or by Cincinnati Children’s or on our behalf by others.

In fundraising, we will only use or disclose demographic information (name, address and contact information, age, gender, and date of birth) and health insurance status, dates of care provided, department of service, treating physician, and outcome information.

If you do not want to be contacted for fundraising efforts, you must notify the Director of Business Operations in writing at Department of Development, MLC 9002, Cincinnati Children’s Hospital Medical Center, 3333 Burnet Avenue, Cincinnati, Ohio 45229-3039.

Patient Directory

We may include your name, hospital location, general condition, and religious affiliation in the hospital’s electronic patient directory while you are a patient at the hospital.

This information, except for your religious affiliation, may be disclosed to any person, including a member of the media who asks for you by name.

Your religious affiliation may be given to a member of the clergy.

During registration, you will be given an opportunity to withhold your information from the patient directory. If, at any time, you wish to remove your information from the patient directory, you must notify the registration desk or a customer service representative.

Individuals Involved in Your Care or Payment for Your Care

During times of treatment, we will disclose your health information to you or your personal representative.

We may also disclose your health information to individuals involved in your care or payment for your care that relates to that involvement or to an entity assisting in a disaster relief effort so that your family can be notified about your condition, status, and location.

Research

Under certain circumstances, we may use and disclose your health information for research purposes. For example, we may disclose your information to researchers preparing to conduct an investigation to help them look for patients with specific medical conditions.

As Required By Law

We will disclose your information when required by law.

Public Health Activities

We may use and disclosure your information for public health activities, such as reporting of diseases, injuries, vital events, or exposures to communicable diseases.

Government Oversight Activities

We may use and disclosure your information to a health oversight agency responsible for overseeing, for example, the health care system or government benefits and regulatory programs.

In some circumstances, such as if we believe a crime has been or is being committed on our premises, in an emergency, or for national security purposes, we may disclose limited information to law enforcement officials.

To Avoid a Serious Threat to Health or Safety

We may use and disclose your health information to prevent a serious threat to your health and safety or the health and safety of the public or another person. Any disclosure, however, would only be to someone able to help prevent the threat.

Organ and Tissue Donation

If you are an organ donor and/or recipient, we may release medical information to organizations that handle organ procurement or organ, eye or tissue transplantation or to an organ donation bank to support the process.

These entities include, but are not limited to, Ohio Solid Organ Transplant Consortium, United Network for Organ Sharing (UNOS) and Ohio Valley Life Center.

Marketing

We are not permitted to use your information in order to conduct marketing activities unless you have specifically authorized the communication.

Psychotherapy Notes

Psychotherapy notes are notes recorded by a mental health professional that document or analyze the contents of a conversation in a counseling session and are kept separated from the rest of your medical record. There are very limited circumstances in which we will use or disclose psychotherapy notes without a written authorization from you.

The originator of the notes may use them for treatment purposes. Cincinnati Children’s may use psychotherapy notes in its own mental health counseling training programs.

We may also use psychotherapy notes in defense of a legal action or other proceeding brought by you, as required by law, or to avert a serious threat to a person’s or the public's health or safety.

Sale of Protected Health Information

We are not permitted to sell your information unless you have specifically authorized the disclosure.

Your Rights Regarding Your Health Information

Authorization to Use Your Information

In order for us to use or disclose your information, other than as described in the previous section, we will generally need to obtain your written authorization which you may revoke at any time to stop any future uses and disclosures.

Right to Access Your Information

You have the right to look at or have a copy of your health information, except for psychotherapy notes; information that may be used in a civil, criminal or administrative action or proceeding; or where prohibited by law.

Cincinnati Children's may also deny you or your personal representative access to your health information if a licensed health care provider determines that releasing it could endanger or cause substantial harm to you or someone else. If you are denied access under these circumstances, you may appeal that decision and another licensed health care professional at Cincinnati Children’s who did not make the original decision to deny your request will review the request and provide a written response to you.

A request for inspection or a copy of your health information must be in writing and directed to Health Information Management (MLC 5015) or Professional Billing Services/Patient Financial Services (MLC 9013), Cincinnati Children's Hospital Medical Center, 3333 Burnet Avenue, Cincinnati, Ohio 45229. We will charge a fee for copying costs.

Right to Amend Your Information

If you believe the information we have about you is incorrect or if important information is missing, you have the right to request that we correct the existing information or add the missing information.

The request must be in writing and directed to Health Information Management (MLC 5015), Cincinnati Children’s Hospital Medical Center, 3333 Burnet Avenue, Cincinnati, Ohio 45229.

Right to Request Confidential Information Be Provided in Certain Way

You may request that when we send your information to you, we do so in a specific way that is convenient for you, such as only using a work number or by mail. We are not required to follow your request, but we will make every reasonable effort to do so or find a mutually satisfactory alternative.

Right to an Accounting of Our Disclosures of Your Information

You also have the right to receive a list of instances where we have disclosed your health information to others for reasons other than for purposes of treatment, payment, operations, national security or intelligence, or to notify persons involved in your care, or for use a facility directory, to you or persons involved in your care, or as a part of a limited data set, or as authorized by you.

The request must be in writing and directed to Health Information Management (MLC 5015), Cincinnati Children’s Hospital Medical Center, 3333 Burnet Avenue, Cincinnati, Ohio 45229.

Right to Limit Our Use or Disclosure of Your Information

You may request in writing that we not use or disclose your information for treatment (other than emergency treatment), payment, or operations purposes, or to individuals involved in your care, unless required by law.

We will consider your request and respond, but we are not required to accept the request. However, we will accept a request for a restriction on a disclosure of your information to a health for payment or operations purposes, if not otherwise required by law, if the information pertains solely to an item or service for which or someone other than a health plan on your behalf has paid in full.

Right to a Paper Copy of this Notice

You have the right to obtain a paper copy of this Notice upon request.

Cincinnati Children's Duties Regarding Your Health Information

We are required to protect the privacy of your information, establish Policies and Procedures that do so, provide this Notice about our privacy practices, and to follow the practices described in this Notice.

We reserve the right to change our Policies and Procedures for protecting health information. When we make a significant change in how we use or disclose your health information, we will also change this Notice and post the new Notice in waiting rooms and registration areas. You can request a written copy of the most recent version of this Notice at any time. It is also posted on our website at www.cincinnatichildrens.org.

How to Make a Complaint About How Your Information is Used

If you believe we have not properly protected your privacy, have violated your privacy rights, or you disagree with a decision we made about access to your protected health information, you may contact our Privacy Officer at the address listed below.

You also may send a written complaint to the US Department of Health and Human Services. The Cincinnati Children’s Privacy Officer can provide you with the appropriate address upon request. There will not be retaliation against those who choose to file a complaint.

How to Get More Information About Our Privacy Policies

To act on any of the information provided in this Notice or for more information about our privacy practices, you may contact our Privacy Officer.

Phone: 1-800-344-2462 or 513-636-4707
Fax: 513-636-4076
Email: privacyofficer@cchmc.org

Mail:
Cincinnati Children's Privacy Officer
Risk Management / Corporate Compliance, MLC 9010
Cincinnati Children’s Hospital Medical Center
3333 Burnet Ave.
Cincinnati, OH 45229-3039

This Notice was issued on August 15, 2013.

ESTE AVISO DESCRIBE CÓMO SE PUEDE USAR Y DIVULGAR LA INFORMACIÓN MÉDICA SOBRE USTED Y CÓMO USTED PUEDE TENER ACCESO A ESTA INFORMACIÓN.POR FAVOR, LÉALO CON CUIDADO.

¿QUÉ ES ESTE AVISO Y POR QUÉ ES IMPORTANTE?

La ley exige a Cincinnati Children’s Hospital Medical Center (Cincinnati Children’s - Hospital Pediátrico y Centro Médico de Cincinnati) que mantenga la privacidad de la información de salud protegida de los pacientes, que proporcione a los pacientes aviso de nuestras obligaciones legales y prácticas de privacidad con respecto a información de salud protegida y que notifique a las personas cuando ocurra una infracción con respecto a información de salud protegida no segura.  Entendemos que su información de salud es muy personal.  Tenemos el compromiso de proteger su privacidad.

Lea este Aviso en su totalidad.  En el aviso se describe cómo podemos usar y divulgar su información de salud protegida para propósitos relacionados con tratamiento, pago y operaciones de atención de salud y para otros propósitos que la ley permite. También se describe su derecho legal a tener acceso y controlar el uso y divulgación de su información de salud protegida.

Los derechos indicados a continuación pertenecen al paciente o al representante personal del paciente, que es el padre, madre o tutor legal del paciente o cualquier persona que tiene autoridad legal para representar los intereses del paciente y actuar en nombre del paciente.  Si hay alguna duda sobre si una persona está calificada legalmente para actuar como representante personal de un paciente, comuníquese con el Encargado de Privacidad al teléfono o dirección mencionados al final de este Aviso.

¿QUÉ CUBRE ESTE AVISO?

Este Aviso cubre información sobre su condición de salud, tratamiento de atención de salud o pago por tratamiento de atención de salud que podría de manera razonable permitir identificar quién es usted. Incluye información en posesión de cualquier departamento o división de Cincinnati Children’s. Este Aviso se aplica a todo el personal, voluntarios, contratistas o cualquier persona que trabaje aquí y que pueda tener acceso a su información de salud.  Tenemos un Acuerdo de criterios para atención de salud organizada con nuestro personal médico, que hace que este Aviso y los derechos y obligaciones contenidos en este documento sean aplicables tanto a Cincinnati Children’s como a nuestro personal médico cuando están proporcionando servicios a los pacientes aquí.

CÓMO USARÁ CINCINNATI CHILDREN’S SU INFORMACIÓN DE SALUD

Se nos permite usar o divulgar a terceros fuera de Cincinnati Children’s su información de salud sin su permiso para tres tipos básicos de actividades:

• Tratamiento – Se nos permite usar su información de salud o divulgarla a terceros fuera de Cincinnati Children’s para proporcionarle atención médica adecuada. Eso significa que podemos proporcionar su información de salud a enfermeras, técnicos, médicos, estudiantes médicos o laboratorios exteriores que participan en su atención.  Por ejemplo, los dietistas pueden necesitar conocer su afección si requiere comidas especiales; los técnicos de radiología y de laboratorios pueden necesitar conocer su afección para llevar a cabo la prueba adecuada; otros médicos pueden necesitar tener su información para asesorar a quienes le brindan cuidados.  En algunas circunstancias, podemos pedirle que complete un formulario de autorización para divulgación de su información de salud protegida a un proveedor de atención de salud externo.
• Pago – Se nos permite usar su información de salud o divulgarla a otros fuera de Cincinnati Children’s para enviar facturas por la atención y los servicios que usted recibe. Por ejemplo, se puede enviar información sobre su atención médica o servicios a su empresa aseguradora, un programa de seguro del gobierno u otra empresa que procesa la información y la envía para que se realicen los pagos.  También podemos proporcionar información a su plan de salud sobre tratamiento que usted puede recibir para que ellos puedan determinar si usted tiene cobertura para esa atención.
• Operaciones de atención de salud – Se nos permite usar su información de salud o divulgarla a terceros fuera de Cincinnati Children’s para administrar el hospital y garantizar atención de calidad.  Por ejemplo, podemos usar o divulgar su información para revisar la forma en que le ofrecemos atención, ayudarnos a mejorar la forma en que hacemos funcionar el hospital, cumplir con requerimientos de normas o licencias o enviarle recordatorios de citas.

Hay algunas otras situaciones en las que podemos usar su información o divulgarla a otras personas fuera de Cincinnati Children’s sin su autorización por escrito, por ejemplo:   

• Alternativas de tratamiento – Podemos usar o divulgar su información de salud para informarle o recomendarle posibles opciones de tratamiento, actividades o alternativas que pueden ser útiles para usted. 
• Beneficios y servicios relacionados con la salud – Podemos usar o divulgar su información de salud para informarle sobre beneficios o servicios relacionados con la salud que pueden interesarle. 
• Actividades de recaudación de fondos – Podemos contactarnos con usted para recaudar fondos para Cincinnati Children’s, y usted tiene el derecho de optar por no recibir comunicaciones sobre recaudación de fondos.  Podemos usar o divulgar su información de salud para contactarnos con usted para actividades de recaudación de fondos para o por Cincinnati Children’s o en nuestro nombre por otros. En actividades de recaudación de fondos, solo usaremos y divulgaremos información demográfica (nombre, dirección e información de contacto, edad, sexo y fecha de nacimiento) y estatus de seguro de salud, fechas en las que se proporcionó atención, departamento de servicio, médico tratante e información de resultados.  Si no desea que se contacten con usted para actividades de recaudación de fondos, debe notificar por escrito al Director of Business Operations en el Department of Development, MLC 9002, Cincinnati Children’s Hospital Medical Center, 3333 Burnet Avenue, Cincinnati, Ohio 45229-3039.
• Directorio de pacientes – Podemos incluir su nombre, ubicación del hospital, condición general y afiliación religiosa en el directorio electrónico de pacientes del hospital mientras sea paciente en el hospital. Esta información, excepto su afiliación religiosa, puede divulgarse a cualquier persona, incluido un miembro de los medios de comunicación que pregunte por usted usando su nombre.  Su afiliación religiosa puede darse a un miembro del clero. Cuando se registre, tendrá la oportunidad de retener su información para que no se incluya en el directorio de pacientes.Si, en cualquier momento, usted desea eliminar su información del directoriode pacientes, debe avisar en el mostrador donde se hacen los registros o a un representante de atención a clientes.
• Personas que participan en su atención o en el pago por su atención médica – Durante los períodos de tratamiento, divulgaremos su información de salud a usted o a su representante.  También podemos divulgar su información de salud a personas que participan en su atención o en el pago de su atención en relación con esa participación o a una entidad que brinda ayuda en casos de catástrofe para que su familia pueda ser notificada sobre su condición, estatus y ubicación.
• Investigación – En determinadas circunstancias, podemos usar y divulgar su información de salud para propósitos de investigación.  Por ejemplo, podemos divulgar su información a investigadores que estén haciendo preparativos para llevar a cabo una investigación, para ayudarlos a buscar pacientes con afecciones médicas específicas.
• Según lo exija la ley – Divulgaremos su información cuando la ley así lo exija.
• Actividades de salud pública --  Podemos usar y divulgar su información para actividades de salud pública, como denuncia de enfermedades, lesiones, eventos vitales o exposiciones a enfermedades contagiosas.
• Actividades de supervisión del gobierno – Podemos usar y divulgar su información a una agencia de supervisión pública responsable por supervisar, por ejemplo, el sistema de atención de salud o los beneficios del gobierno y los programas regulatorios.  En algunas circunstancias, por ejemplo si creemos que se ha cometido o se está cometiendo un delito en nuestras instalaciones, en una emergencia, o en relación con propósitos de seguridad nacional, podemos divulgar información limitada a autoridades del orden público.
• Para evitar una amenaza grave a la salud o la seguridad – Podemos usar y divulgar su información de salud para evitar una amenaza grave a su salud y seguridad o a la salud y seguridad del público o de otra persona.  Todas las divulgaciones se harán solamente a alguien que tenga la capacidad de ayudar a evitar la amenaza. 
• Donación de órg anos y tejidos – Si usted es donante y/o receptor de órganos, podemos divulgar información médica a organizaciones que manejan el proceso de obtención de órganos o el trasplante de órganos, ojos o tejidos o a un banco de donación de órganos para brindar apoyo al proceso. Esas entidades incluyen, pero no se limitan a, Ohio Solid Organ Transplant Consortium, United Network for Organ Sharing (UNOS) y Ohio Valley Life Center.
• Marketing  – No nos está permitido usar su información para llevar a cabo actividades de marketing, a menos que haya autorizado específicamente la comunicación.
• Notas de psicoterapia – Las notas de psicoterapia son notas registradas por un profesional de salud mental que documenta o analiza los contenidos de una conversación en una sesión de asesoramiento psicológico y se guardan aparte del resto de sus registros médicos.  Hay circunstancias muy limitadas en las que usaremos o divulgaremos notas de psicoterapia sin su autorización por escrito.  La persona que creó las notas puede usarlas para propósitos relacionados con el tratamiento.  Cincinnati Children’s puede usar notas de psicoterapia en sus propios programas de capacitación de asesoramiento psicológico en salud mental.  También podemos usar notas de psicoterapia en defensa de una acción legal u otros procedimientos iniciados por usted, según lo exija la ley, o para impedir una amenaza grave a la salud o la seguridad de una persona o del público.   
• Venta de información de salud protegida – No nos está permitido vender su información a menos que usted haya autorizado específicamente la divulgación.

SUS DERECHOS CON RESPECTO A SU INFORMACIÓN DE SALUD

• Autorización para usar su información – Para que podamos usar o divulgar su información, en casos diferentes a los descritos en la sección anterior, generalmente necesitaremos obtener su autorización por escrito, que usted puede revocar en cualquier momento para interrumpir futuros usos y divulgaciones.
• Derecho al acceso a su información – Usted tiene el derecho de ver o tener una copia de su información de salud, excepto las notas de psicoterapia; la información que puede ser usada en acciones o procedimientos civiles, penales o administrativos o cuando esté prohibido por la ley.  Cincinnati Children’s también puede negarle a usted o a su representante acceso a su información de salud si un proveedor de atención de salud con licencia determina que entregarle la información podría poner en riesgo o causar daño importante a usted o a otra persona.  Si se le niega el acceso a la información bajo esas circunstancias, puede apelar esa decisión y otro profesional de atención de salud con licencia de Cincinnati Children’s que no tomó la decisión original de rechazar su pedido revisará el pedido y le proporcionará una respuesta por escrito. El pedido de que se realice una inspección o una copia de su información de salud debe estar por escrito y dirigirse a Health Information Management (MLC 5015) o Professional Billing Services/Patient Financial Services (MLC 9013), Cincinnati Children’s Hospital Medical Center, 3333 Burnet Avenue, Cincinnati, Ohio 45229. Se cobrará una tarifa por los costos de las copias.
• Derecho a enmendar su información – Si cree que la información que tenemos sobre usted es incorrecta o si falta información importante, tiene derecho a pedir que corrijamos la información existente o agregar la información que falta. El pedido debe hacerse por escrito y dirigirse a Health Information Management (MLC 5015) o Professional Billing Services/Patient Financial Services (MLC 5015), Cincinnati Children’s Hospital Medical Center, 3333 Burnet Avenue, Cincinnati, Ohio 45229.
• Derecho a pedir que se proporcione información confidencial de una manera específica – Usted puede pedir que cuando le enviemos información, lo hagamos de una manera que sea conveniente para usted, por ejemplo usando solamente un número en su trabajo o por correo. No tenemos obligación de cumplir con su pedido, pero haremos todos los esfuerzos que sean razonables para hacerlo o para encontrar una alternativa mutuamente satisfactoria.
• Derecho a un seguimiento de nuestras divulgaciones de su información – Usted también tiene derecho a recibir una lista de las instancias en las que hayamos divulgado su información de salud a otros por motivos que no sean propósitos relacionados con tratamiento, pago, operaciones, seguridad nacional o inteligencia, o para notificar a personas que participan en su atención médica, o para el uso de un directorio de las instalaciones, para usted o personas que para participan en su atención médica, o como parte de un conjunto limitado de datos, o según usted lo autorice.  El pedido debe hacerse por escrito y dirigirse a Health Information Management(MLC 5015) o Professional Billing Services/Patient Financial Services (MLC 5015), Cincinnati Children’s Hospital Medical Center, 3333 Burnet Avenue, Cincinnati, Ohio 45229.
• Derecho a limitar nuestro uso o divulgación de su información – Usted puede pedir por escrito que no usemos ni divulguemos su información para tratamiento (aparte de tratamiento de emergencia), pago u propósitos relacionados con el funcionamiento, o a personas que participan en su atención médica, a menos que lo exija la ley. Consideraremos su pedido y responderemos, pero no tenemos obligación de aceptar el pedido.  Sin embargo, aceptaremos un pedido de una restricción en una divulgación de su información de salud para propósitos relacionados con pagos o funcionamiento, si la ley no exige otra cosa, si la información concierne únicamente a un elemento o servicio para el cual usted o alguien que no es un plan de salud en su nombre ha pagado el monto total.
• Derecho a una copia en papel de este aviso –Usted tiene derecho a obtener una copia en papel de este Aviso previo pedido.

OBLIGACIONES DE CINCINNATI CHILDREN’S CON RESPECTO A SU INFORMACIÓN DE SALUD

Se nos exige que protejamos la privacidad de su información, que establezcamos Políticas y Procedimientos para hacerlo, que proporcionemos este Aviso sobre nuestras prácticas de privacidad y que sigamos las prácticas que se describen en este Aviso.

Nos reservamos el derecho de cambiar nuestras Políticas y Procedimientos para proteger la información de salud. Cuando hagamos un cambio significativo en la manera en que usamos o divulgamos su información de salud, cambiaremos también este Aviso y publicaremos el nuevo Aviso en salas de espera y áreas para registro. Puede pedir una copia por escrito de la versión más reciente de este Aviso en cualquier momento.  También se publica en nuestro sitio web en www.cincinnatichildrens.org.

CÓMO PRESENTAR UNA QUEJA SOBRE CÓMO SE USA SU INFORMACIÓN

Si cree que no hemos protegido de manera adecuada su privacidad, que hemos infringido sus derechos de privacidad, o no está de acuerdo con una decisión que hemos tomado sobre el acceso a su información de salud protegida, puede comunicarse con nuestro encargado de privacidad en la dirección que se menciona a continuación. También puede enviar una queja por escrito al U.S. Department of Health and Human Services. El Encargado de Privacidad de Cincinnati Children’s puede proporcionarles la dirección correspondiente si lo solicitan.  No se tomarán medidas contra quienes decidan presentar una queja.

CÓMO OBTENER MÁS INFORMACIÓN SOBRE LAS PRÁCTICAS DE PRIVACIDAD DE CINCINNATI CHILDREN’S

Para actuar con respecto a cualquier información proporcionada en este Aviso o para obtener más información sobre nuestras prácticas de privacidad, puede contactar a nuestro Encargado de Privacidad, teléfono: 1-800-344-2462 o 513-636-4707; fax: 513-636-4076; correo electrónico: privacyofficer@cchmc.org; o por correo: CCHMC Privacy Officer, Risk Management/Corporate Compliance, MLC 9010. Cincinnati Children’s Hospital Medical Center, 3333 Burnet Avenue, Cincinnati, Ohio 45229-3039. 

FECHA DE VIGENCIA DE ESTE AVISO

Este Aviso fue emitido el 15 Agosto, 2013.

Cincinnati Children's Hospital Medical Center has developed social media sites to share information, videos, comments and more. These social media sites include Facebook and LinkedIn, but this policy is intended to address all similar "community sites" with user-generated content. By accessing, viewing and/or posting any content to any of these sites you agree to the following terms of use:

1. You are at least 13 years old.
2. If you are a healthcare provider or a "covered entity" under federal HIPAA regulations, you are prohibited from posting any content that is Personal Health Information, including patient images. All users are prohibited from posting personal health information related to individuals other than themselves or their dependents.
3. Users are prohibited from using the sites to provide medical advice or medical commentary (unless expressly authorized through your affiliation as a Cincinnati Children's physician, nurse or allied health professional.)
4. As a visitor or user, you agree that you will not violate any laws and regulations, including copyright, intellectual property rights laws and others regarding any content that you send or receive. You also agree you will not transmit any material in any manner that is unlawful, disruptive, threatening, profane, abusive, harassing, embarrassing, tortuous, defamatory, obscene, libelous, or is an invasion of another's privacy, is hateful or racially, ethnically or otherwise objectionable as solely determined by Cincinnati Children's staff; impersonate any person or entity or falsely state or otherwise misrepresent your affiliation with a person or entity; transmit any unsolicited or unauthorized advertising, promotional materials or any other form of solicitation; transmit any material that contains software "viruses."
5. Cincinnati Children's reserves the right to monitor and/or terminate your access to the social media site at any time, without notice and for any reason in its sole discretion. Cincinnati Children's may remove any materials in its sole discretion. You understand and agree that Cincinnati Children's may disclose your communications and activities with Cincinnati Children's in response to lawful requests by governmental (including judicial) authorities.
6. By posting any content on any Cincinnati Children's social media site, you grant to Cincinnati Children's the irrevocable right to reproduce, distribute and publish such content, in whole or part, for any purpose Cincinnati Children's deems appropriate.
7. You shall defend, indemnify, and hold harmless Cincinnati Children's and its corporate affiliates and their respective representatives from and against any liabilities whatsoever resulting from the use of this site.
8. You acknowledge that you assume all responsibility related to the security, privacy and risks inherent in sending any content over the Internet. Cincinnati Children's does not control the third-party sites and does not endorse products or services advertised on the social media sites.
9. These terms of use may be updated at any time and each time a user accesses a social networking site the new terms of use will be in effect.
10. Cincinnati Children’s Hospital Medical Center’s social media channels provide general scientific information and are for educational purposes. We don’t offer medical advice for any specific patient or replace formal or informal medical consultations. Information given does not relate to any particular patient and doesn't create a doctor-patient relationship or substitute for medical diagnosis or treatment. If you use the information provided, you should decide its value and how to apply it to your situation independently. The authors of this website have no control over your decisions. Using this website doesn't create a doctor-patient relationship or involve examination, diagnosis, treatment, or prescribing treatment for any patient.

This is how Cincinnati Children’s will handle information learned about you from your visit to our website. The information we receive depends upon what you do when visiting our site. For each visitor to the website, the Cincinnati Children’s web server automatically recognizes the consumer’s domain name and email address (where possible).

Cincinnati Children’s collects the domain name and email address (where possible) of visitors to our website, aggregates information on what pages consumers access or visit (e.g. number of site visitors, time on site), user-specific information on what pages consumers access or visit and information volunteered by the consumer, such as survey information and / or site registrations. Cincinnati Children’s collects this information by using “cookies,” which are small files stored on your computer’s hard drive. Cookies are text information files that your web browser places on your computer when you visit a website. Most browsers accept cookies automatically but can be configured not to accept them or to indicate when a cookie is being sent.

The information we collect is used to improve the content of the website, offer online features that are helpful to visitors, customize the content and / or layout of our page for each individual consumer, and contact consumers for marketing purposes. Through the use of Google Analytics and Google Remarketing code on the website, Google gathers anonymous data via “cookies.” If you do not want information collected in this manner, there is a simple procedure in most browsers that allows you to decline the use of cookies. To opt out of Google ads, go to Ads Preference Manager. If you do not want to receive email from Cincinnati Children’s, send an email to marketing@cchmc.org, and indicate you do not want to receive email from the institution.

You also may decide to send Cincinnati Children’s personally identifying information, for example, in an electronic mail message or by voluntarily disclosing that information by completing an online survey. We may use personally identifying information from you to respond to your inquiries or for other internal business purposes. This information will not be sold or rented to third parties. You should be aware, however, that others may access such information and use it, though any such use would be without the consent of Cincinnati Children’s.

We will not obtain personally identifying information about you when you visit our site, unless you choose to provide such information.

The Cincinnati Children’s website is managed in the State of Ohio, United States of America. We make no representation that material found at the site is appropriate or available for use in other locations. If you access the Cincinnati Children’s site from other locations, you are responsible for compliance with local laws.

When you sign up for text messages from Cincinnati Children’s, you are signing up to receive text messages related to your relationship with Cincinnati Children’s, including updates related to your visits, MyChart account, one-time passcode, billing notifications, prescription reminders, and care management.

You can opt-out of SMS messages by texting STOP to respective short code. Your opt-out request will generate one final message confirming that you have been unsubscribed. You will no longer receive SMS messages from the short code you opted out from. If you want to join again, sign up using MyChart or text HELP to the short code for instructions.

If you are experiencing issues with the messaging program you can reply with the keyword HELP for more assistance, or you can get help directly at 513-636-4200, mychart@cchmc.org or https://mychart.cincinnatichildrens.org/mychart.

Carriers are not liable for delayed or undelivered messages.

Message and data rates may apply for any messages sent to you from us and to us from you. Message frequency may vary.

SMS messages are unsecure and may be read by third parties.

Our Privacy Policy is https://www.cincinnatichildrens.org/privacy-data-security-notices. Contact us at 513-636-4200, mychart@cchmc.org or https://mychart.cincinnatichildrens.org/mychart.