Our professions require that we gather a great deal of personal information
about individuals. However, we must carefully avoid any unwarranted invasion of
the unwarranted invasion of the privacy of our patients. We must also guard against
invading the privacy of our employees.
For this reason, the following guidelines apply:
Access to information regarding individuals should be limited to employees
of UMDNJ responsible for maintenance of UMDNJ's records.
Use only legitimate means to collect the information and, whenever practical,
obtain it directly from the individual concerned.
When release of any information with respect to patients in drug and alcohol
treatment programs is contemplated, the special confidentiality rules applicable
to these patients must be adhered to carefully. Similarly, the confidentiality
rules applicable to disclosure of HIV/AIDS status must be strictly followed.
Any employee or agent of UMDNJ who, without authorization, discloses information
in violation of the privacy rights of our patients or others may be subject to
discipline, up to and including immediate termination (in addition to possible
civil or criminal sanctions). Any person who becomes aware of such unauthorized
disclosure should report it immediately to the Compliance Officer.
