Last Updated: March 15, 2023
Welcome to the UC San Diego Health Privacy Notice! This Privacy Notice explains how the UC San Diego Health System ("UC San Diego Health", "UCSDH", "we", "us" or "our") collects, uses, discloses, and otherwise processes personal information (as defined below) in connection with our website, health.ucsd.edu, and other websites we own and operate that link to this Privacy Notice (the "Sites"), our mobile apps, and the related content, platform, services, products, and other functionality offered on or through our services (collectively, the "Services"). It does not address our privacy practices relating to UC San Diego Health employees and other personnel.
UC San Diego Health is the controller of the personal information we hold about you in connection with your use of the Services. This means that we determine and are responsible for how your personal information is used.
This Privacy Notice does not apply to the collection, use, and disclosure of your protected health information. Please see our HIPAA Notice of Privacy Practices (below) for more information about how UC San Diego Health collects, uses, and discloses your protected health information under the Health Insurance Portability and Accountability Act of 1996 (HIPAA).
When we collect personal information that is part of a student or an applicant's educational record ("Student Data"), we collect, use, store, and otherwise process such information in accordance with the Family Educational Rights and Privacy Act (FERPA). To the extent that our processing practices in connection with Student Data differ from this Privacy Notice, the practices described in this Privacy Notice will not apply.
When we use the term "personal information" in this Privacy Notice, we mean any data or information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular natural person or household or any other data or information that constitutes "personal data", "personal information," or "personally identifiable information." As noted above, it does not include protected health information under HIPAA.
We collect personal information in a variety of ways. For example, you may provide us your personal information when you contact us or send us messages, conduct a search on our Sites, subscribe to our mailing lists, newsletters or other forms of marketing communications, submit a job application, participate in a survey, make a purchase at our gift shop, or use some other feature of our Service.
We may link or combine your activities and information collected from you on our websites and mobile apps with information we receive from third parties, as well as information we collect automatically through tracking technologies (defined below). This allows us to provide you with a personalized experience regardless of how you interact with us.
Personal Information Collected from You
We may collect the following categories personal information submitted to us by individuals through the Services:
Information Automatically Collected
As is true of many digital properties, we and our third-party partners may automatically collect information you provide to us and information about how you access and use the Services when visiting or interacting with our Services, such as the list below and in the sub-sections here:
We and our third-party providers may use (i) cookies or small data files that are stored on an individual's computer and (ii) other, related technologies, such as web beacons, pixels, embedded scripts, location-identifying technologies and logging technologies (collectively, "cookies") to automatically collect this information. We may also use this information to distinguish you from other users of our Services. This helps us monitor and analyze how you use and interact with our Services. It also helps us and our partners to determine products and services that may be of interest to you.
For more information about these practices and your choices regarding cookies, please see the Cookie Notice (below).
Personal Information from Third Parties
We also obtain personal information from third parties; which we often combine with personal information we collect either automatically or directly from an individual.
We may receive the same categories of personal information as described above from the following third parties:
Through the provision of our Services, we may also process anonymous and otherwise deidentified information that cannot reasonably be used to infer information about, or otherwise be linked to, a particular consumer or household. UC San Diego Health commits to maintain and use the information in deidentified form and will not attempt to reidentify the information, except in instances where necessary for determining whether the deidentification process used by UC San Diego Health satisfies the requirements under applicable law.
Additional Uses of Personal Information
We may use personal information we collect to:
Where you choose to contact us, we may need additional information to fulfill the request or respond to inquiries. We may provide you with additional privacy-related information where the scope of the inquiry/request and/or personal information we require fall outside the scope of this Privacy Notice. In that case, the additional privacy notice will govern how we may process the information provided at that time.
UC San Diego Health's information management practices conform to the requirements of the Information Practices Act of 1977 (Civil Code Section 1798, et seq.), the Public Records Act (California Government Code Section 6250, et seq.), California Government Code Section 11015.5, and other applicable laws pertaining to information privacy.
Any information acquired by the UC San Diego Health through the Sites is subject to the limitations set forth in the Information Practices Act. UC San Diego Health will not distribute or share electronically collected personal information (as defined in subdivision (d) of California Government Code Section 11015.5) about users to any third party without the permission of the user, except in narrow circumstances set forth in this Notice. UC San Diego Health will not sell any electronically collected personal information to any third party. Such electronically collected personal information is exempt from requests made pursuant to the California Public Records Act (Chapter 3.5 (commencing with Section 6250) of Division 7 of Title 1).
We may also share, transmit, disclose, grant access to, make available, and provide personal information with and to third parties, as follows:
UC San Diego Health will not distribute or share "electronically collected personal information" (as defined in subdivision (d) of California Government Code Section 11015.5) about users to any third party without the permission of the user, except in narrow circumstances as set forth in this Privacy Notice, such as instances when authorized under law (including but not limited to the Information Practices Act), or to assist another state agency or public law enforcement organization in any case where the security of a network operated by a state agency has been, or is suspected of having been, breached. UC San Diego Health will not sell any electronically collected personal information to any third party. Such electronically collected personal information is exempt from requests made pursuant to the California Public Records Act (Chapter 3.5 (commencing with Section 6250) of Division 7 of Title 1).
You may control your information in the following ways:
Our Services are not directed to, and we do not intend to, or knowingly, collect or solicit personal information from children under the age of 16. If an individual is under the age of 16, they should not use our Services or otherwise provide us with any personal information either directly or by other means. If a child under the age of 16 has provided personal information to us, we encourage the child's parent or guardian to contact us to request that we remove the personal information from our systems. If we learn that any personal information we collect has been provided by a child under the age of 16, we will promptly delete that personal information.
Our Services may include links to third-party websites, plug-ins and applications. Except where we post, link to or expressly adopt or refer to this Privacy Notice, this Privacy Notice does not apply to, and we are not responsible for, any personal information practices of third-party websites and online services or the practices of other third parties. To learn about the personal information practices of third parties, please visit their respective privacy notices.
We may update this Privacy Notice from time to time. When we make changes to this Privacy Notice, we will change the date at the beginning of this Privacy Notice. If we make material changes to this Privacy Notice, we may notify individuals by email to their registered email address, by prominent posting on our Services, or through other appropriate communication channels. All changes shall be effective from the date of publication unless otherwise provided. We encourage you to review this Privacy Notice frequently to be informed of how we are processing your information.
If you have any questions or requests in connection with this Privacy Notice or other privacy-related matters, please contact us by using one of the following methods:
UC San Diego Health Sciences
Office of Compliance and Privacy
Compliance Help Line Telephone: (858) 657-7487
Compliance Help Line Email: email@example.com
Last Modified: March 15, 2023
Unless otherwise expressly stated, terms in this notice have the same meaning as defined in the Privacy Notice.
We use the following types of cookies:
(a) Strictly necessary cookies. These cookies enable core functionality such as security, network management and accessibility. You may disable these by changing your browser settings, but this may affect how the Services function. The legal basis for our use of strictly necessary cookies is our legitimate interests, namely being able to provide and maintain our Services.
(b) Functional cookies. These enable a website to remember information that changes the way the website behaves or looks, like your preferred language or the region that you are in. The legal basis for our use of functionality cookies is our legitimate interests, namely being able to provide and maintain our Services.
(c) Analytical/performance cookies. These cookies allow us to recognize and count the number of visitors to our Services, and to see how visitors move around our Services when they are using them. This helps us to improve the way our Services work, for example, by ensuring that users are finding what they are looking for easily.
(d) Targeting Cookies: These cookies record your visit to our Services, the pages you have visited and the links you have followed. They are used to track visitors across our Services.
We may include or engage in the following as part of our Services:
We may also utilize certain forms of display advertising and other advanced features through Google Analytics. These features enable us to use first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the DoubleClick advertising cookie) or other third-party cookies together to inform, optimize, and display ads based on your past visits to the Services. You may control your advertising preferences or opt-out of certain Google advertising products by visiting the Google Ads Preferences Manager, currently available at https://google.com/ads/preferences, or by visiting NAI's online resources at http://www.networkadvertising.org/choices.
Please note that we link some of the personal information we collect through cookies with the other personal information that we collect about you and for the purposes described in our Privacy Notice.
Note UC San Diego Health will not distribute or share "electronically collected personal information" (as defined in subdivision (d) of California Government Code Section 11015.5) about users to any third party without the permission of the user, except in narrow circumstances as set forth in our Privacy Notice. UC San Diego Health will not sell any electronically collected personal information to any third party.
If you would prefer not to accept cookies, most browsers will allow you to change the setting of cookies by adjusting the settings on your browser to: (i) notify you when you receive a cookie, which lets you choose whether or not to accept it; (ii) disable existing cookies; or (iii) set your browser to automatically reject cookies. Be aware that disabling cookies may negatively affect the functionality of this and many other websites that you visit. Disabling cookies will usually result in also disabling certain functionalities and features of the Services.
Depending on your device and operating system, you may not be able to delete or block all cookies. In addition, if you want to reject cookies across all your browsers and devices, you will need to do so on each browser on each device you actively use. These settings will typically be found in the "options" or "preferences" menu of your browser. In order to understand these settings, the following links may be helpful, otherwise you should use the "Help" option in your browser for more details.
Cookie settings in Internet Explorer (https://support.microsoft.com/en-gb/help/278835/how-to-delete-cookie-files-in-internet-explorer)
Cookie settings in Firefox (http://support.mozilla.org/en-US/kb/cookies)
Cookie settings in Chrome (https://support.google.com/chrome/answer/95647?hl=en)
Cookies settings in Safari web (https://support.apple.com/en-gb/guide/safari/manage-cookies-and-website-data-sfri11471/mac) and iOS (https://support.apple.com/en-gb/HT201265)
You may also set your email options to prevent the automatic downloading of images that may contain technologies that would allow us to know whether you have accessed our email and performed certain functions with it.
If you would like to find out more about cookies and other similar technologies, please visit www.allaboutcookies.org. or the Network Advertising Initiative's online sources at www.networkadvertising.org.
PLEASE REVIEW IT CAREFULLY
UC San Diego Health is one of the health care components of the University of California. The University of California health care components consist of the UC medical centers, the UC medical groups, clinics and physician offices, the UC schools of medicine and other UC health professional schools. The administrative and operational units supporting the provision of care at all locations listed are also health care components of the University of California.
UC San Diego Health is committed to protecting the privacy of your medical or health information. We are required by law to maintain the privacy of your health information. We will follow the legal duties and privacy practices described in this notice.
You have the following rights regarding the health information we maintain about you:
Right to See and Copy. You have the right to see or get a copy of your health information, with certain exceptions. If we have the information in electronic format, you have the right to obtain your health information in an electronic format if possible. If not, we will work with you to find a way for you to receive the information electronically or as a paper copy.
Your request must be made in writing and submitted to UC San Diego Medical Center, 200 West Arbor Drive, MC 8825, San Diego, CA 92103-8825, Attn: Release of Information Unit call: 619-543-6704 or fax 619-543-7128. If you request a copy of the information, there may be a reasonable, cost-based fee for these services. You may also request that a copy of your health information be released to a third party that you choose.
Right to Ask for a Correction. If you feel that your health information is incorrect or incomplete, you may ask us to change or add more information to complete your record. Your request must be made in writing and submitted to UC San Diego Medical Center, 200 West Arbor Drive, MC 8825, San Diego, CA 92103-8825, Attn: Release of Information Unit call: 619-543-6704 or fax 619-543-7128. We may say "no" to your request, but we'll tell you why in writing.
Right to Know How We Have Shared Your Health Information. You have the right to request a list (accounting) of the times UC San Diego Health has shared your health information with others, such as to government agencies. The list will not include any disclosures made for treatment, payment, health care operations, or any disclosure you asked us to make. The request may be for a period covering up to six years before the date you ask for the list. Your request must be made in writing and submitted to UC San Diego Medical Center, 200 West Arbor Drive, MC 8825, San Diego, CA 92103-8825, Attn: Release of Information Unit call: 619-543-6704 or fax 619-543-7128. If you request an accounting more than once during a 12-month period, we may charge you a reasonable, cost-based fee.
Right to Ask for Restrictions. You have the right to ask us to limit how we use and share certain health information for treatment, payment, or health care operations. We are not required to agree to your request. If you pay for a service or healthcare item out-of-pocket in full, you can ask us not to share that information for purposes of payment or our operations. Your request must be made in writing and submitted to UC San Diego Medical Center, 200 West Arbor Drive, MC 8825, San Diego, CA 92103-8825, Attn: Release of Information Unit call: 619-543-6704 or fax 619-543-7128.
Right to Ask for Confidential Communications. You have the right to ask that we communicate with you about your health information in a certain way or at a certain location. For example, you may ask that we contact you only at home or only by mail. You must make your request in writing to UC San Diego Medical Center, 200 West Arbor Drive, MC 8825, San Diego, CA 92103-8825, Attn: Release of Information Unit call: 619-543-6704 or fax 619-543-7128. We will agree to all reasonable requests.
Right to a Paper Copy of This Notice. You can ask for a paper copy of this Notice at any time, even if you have agreed to receive this Notice electronically. Copies of this Notice are available throughout UC San Diego Health locations, or you may obtain a copy at our website, https://health.ucsd.edu.
Right to be Notified of a Breach. You have the right to be notified if we discover a breach that may have compromised the privacy or security of your information.
We typically use and disclose your health information in the following ways.
For Treatment. We use your health information to provide you with treatment or services. We disclose your health information to doctors, nurses, technicians, medical and health sciences students, or other health system personnel involved in your care. We may also share your health information with other non-UC San Diego Health providers for care or treatment. For example, we may share your health information if you are being referred to another provider at a non-UC Health institution.
For Payment. We use and share your health information to bill or get payment from health plans or other entities. For example, we give information to your health plan so it will pay us for your services.
For Health Care Operations. We use and share your health information to manage your treatment and services, run our business and teaching institution operations, improve your care, and contact you when necessary. For example, your health information may be used to review the quality and safety of our services, or for business planning, management and administrative services. We may also share your health information with an outside company performing services for us such as accreditation, legal, or auditing services. These companies are required by law to keep your health information confidential.
We are permitted or required by law to share your health information in others ways ・ usually in ways that help the public, such as public health and research. We have to meet many conditions in the law before we can share your information for these reasons.
Hospital Directory. If you are hospitalized, we may include certain information about you in the hospital directory. This is so your family, friends, and clergy can visit you in the hospital and generally know how you are doing. You have the right to object to the release of directory information.
Individuals Involved in Your Care or Payment for Your Care. We may share health information with your family, close friends, or others involved in your care or payment for your care.
- Epic's Care Everywhere
- San Diego Health Connect
Health Information Exchanges. UC San Diego Health may participate in one or more health information exchanges (HIE), where we may share your health information, as allowed by law, to other health care providers or entities for coordination of your care. This allows health care providers at different facilities participating in your treatment to have the information needed to treat you. We currently participate in the HIEs listed here https://www.epic.com/careeverywhere ; http://www.sdhealthconnect.org/.
If you do not want UC San Diego Health to share your information in an HIE, you can opt out by completing an opt-out form and submitting it to Health Information Services UC San Diego Medical Center: 200 West Arbor Drive MC8825 San Diego, CA 92103 or call 619-543-6700. UC San Diego Health will agree with your opt-out request as needed to comply with the laws that apply to us. Opting out stops UC San Diego Health from sharing your information with other health care providers through the HIE; it does not stop other health care providers from sharing your information with UC San Diego Health, and it does not stop a health care provider that already received your information from keeping it. To stop other health care providers from sharing your information with UC San Diego Health, you must contact those providers directly. If you opt out, you can choose to resume participation by submitting a written request to UC San Diego Health; Health Information Management: 200 West Arbor Drive, #8825 San Diego CA, 92103 Fax: 619-543-7128.
Research. UC San Diego Health is a research institution. In certain circumstances, we can use or share your information for research without obtaining your authorization. For example, we may use your health information without your authorization for certain research when the research goes through a special review process to protect patient safety, welfare, and confidentiality.
University of California researchers may contact you about your interest in participating in certain research studies. Researchers may only contact you if they have approval to do so under a special review process.
Organ and Tissue Donation. If you are an organ donor, we may share your health information with organ procurement organizations.
Coroners, Medical Examiners and Funeral Directors. We may share health information with a coroner, medical examiner, or funeral director when an individual dies. This may be necessary, for example, to identify a deceased person or determine cause of death.
Disaster Relief Efforts. We may share your health information to an entity assisting in a disaster relief effort so that others can be notified about your condition, status and location.
Fundraising Activities. We may use information you provided us to contact you about fundraising programs and events. You can opt out of receiving fundraising information for UC San Diego Health by contacting us at the toll-free number 1-800-588-2734 or by email firstname.lastname@example.org.
As Required By Law. We will disclose your health information when required to do so by federal or state law. For example, we may share your health information with the Department of Health and Human Services if it wants to see that we're complying with federal privacy law.
Respond to lawsuits and legal actions. We can share health information about you in response to a court or administrative order, or in response to a subpoena.
Military and Veterans. If you are or were a member of the armed forces, we may release your health information to military authorities as allowed or required by law.
Inmates. If you are an inmate of a correctional institution or under the custody of law enforcement officials, we may release your health information to the correctional institution as allowed or required by law.
Workers' Compensation. We may use or share your health information for Workers' Compensation or similar programs as allowed or required by law. These programs provide benefits for work-related injuries or illness.
Public Health and Safety. We may disclose your health information for certain situations such as:
Health Oversight Activities. We may share your health information with governmental, licensing, auditing, and other agencies as allowed or required by law.
Law Enforcement. As allowed or required by law, when certain conditions are met, we may release your health information to law enforcement.
National Security and Intelligence Activities. As required by law, we may share your health information for special government functions such as national security and presidential protective services.
Marketing or Sale of Health information. Most uses and sharing of your health information for marketing purposes or any sale of your health Information are strictly limited and require your written authorization.
Other Uses and Disclosures of Health Information. Other ways we share and use your health information not covered by this Notice will be made only with your written authorization. If you authorize us to use or disclose your health information, you may cancel that authorization, in writing, at any time. However, the cancellation will not apply to information we have already used and disclosed based on the earlier authorization.
Special laws apply to certain kinds of health information considered particularly private or sensitive to a patient. This sensitive information includes psychotherapy notes, sexually transmitted diseases, drug and alcohol abuse treatment records, mental health records, and HIV/AIDS information. When required by law, we will not share this type of information without your written permission. In certain circumstances, a minor's health information may receive additional protections.
We may change the terms of this Notice at any time, and the changes will apply to all health information we have about you. The current Notice will be available upon request, at our locations, and on our website.
Organized Healthcare Arrangements. UC San Diego Health participates in an Organized Healthcare Arrangement (OHCA) with other healthcare providers. Within the OHCA, member organizations may share your health information for treatment, payment or operations related to the OHCA. For a list of UC San Diego Health's current OHCA participants, click here UC San Diego Health Affiliated Network (https://ucsdhn.org) or call 858-249-0279.
If you have any questions or concerns about this Notice, please contact UC San Diego Health
UC San Diego Health
200 West Arbor Drive, Mail Code 8916
San Diego, CA 92103 - 8916
Call 619-543-5678 or fax 619-543-6817; E-mail: email@example.com.
If you feel your rights have been violated, you may file a complaint with
UC San Diego Health
200 West Arbor Drive, Mail Code 8916
San Diego, CA 92103 - 8916
Call 619-543-5678 or fax 619-543-6817
You may also file a complaint with the Secretary of the U.S. Department of Health and Human Services, Office for Civil Rights. You will not be retaliated against for filing a complaint.
Last Updated: April 3, 2023
UC San Diego Health is pleased to offer you the ability to view parts of your medical record and interact with your physician's office online by using MyPath. This web app and related services are subject to compliance with the terms and conditions set forth below. Please read the following information carefully. Your continued use of this app will indicate your agreement to be bound by the terms and conditions set forth below. If you do not agree to be bound by these terms and conditions, promptly exit this app.
NEVER make any communications requiring urgent attention using MyPath. Staff do their best to read and respond to requests within three business days. However, delays can occur based upon volume and availability of staff. Therefore, for all urgent medical matters, contact your health care provider's office immediately, go to an emergency room, or call 911.
To be eligible to participate in MyPath, you must meet the minimum age requirements and you must be an active patient of a health care provider within our organization who has elected to offer MyPath to his/her patients.
MyPath is designed as a secure Internet-based environment through which you may receive confidential medical information about yourself. MyPath uses your MyUCSDChart login username and password, so you must sign up and activate your MyUCSDChart account to log in to MyPath. Please DO NOT SHARE your password with anyone. The individual username and password you choose are the keys to protecting the confidentiality of your information. You are responsible for remembering your username and password and for keeping them confidential.
Our organization assumes no responsibility for how you use the information you obtain from this app. You should consult with a physician or other health care provider regarding your own condition and how this app content may or may not apply to you. You may be accessing your own medical information via the MyPath application and may wish to communicate with one of your health care providers about that or related information. Neither MyPath nor any other application available through this app is a substitute for appropriate and timely contact with your health care provider. This app is not a substitute for consultation with your health care provider. You should never change or stop any course of treatment prescribed by your health care provider without first consulting him or her.
Our organization may restrict or terminate your access to MyPath at any time. If access is restricted for planned maintenance of the MyPath system, every effort will be made to communicate downtime to all users in advance. However, there may be reasons to restrict access to MyPath without advance notice. If your use of MyPath violates these Terms and Conditions, we reserve the right to permanently terminate your access to MyPath.
All pages within this app and any material made available for download are the property of our organization. The content on the app is provided for our patients only. Our organization name and its associated logo are the trademarks and service marks of our organization. All other trademarks, service marks, and logos used in this app, including but not limited to MyChart and Epic, are the trademarks, service marks, or logos of their respective owners. Nothing on this app should be construed as granting any license or right to use any trademark, service mark, or logo displayed on this app without the express permission of our organization or the third party that may own the trademark, service mark, or logo.
Our organization grants a limited license to each user to make personal use only of the app and the associated services in accordance with these terms and conditions of use. This license expressly excludes, without limitation, any reproduction, duplication, sale, resale or other commercial use of the app and the associated services, making any derivative of the app or the associate services, the collection and use of user email addresses or other users information, including, without limitation, health information or any data extraction or data mining whatsoever.
Although our organization attempts to ensure the integrity of the app, it makes no guarantees whatsoever as to the correctness or accuracy of the app. It is possible that the app could include typographical errors, inaccuracies or other errors. In the event that an inaccuracy arises, please inform us so that it can be corrected. Information contained on the app may be changed or updated without notice.
Our organization makes no representations whatsoever about any other web site that you may access through this app. When you access an external site, please be advised that it is independent from our organization, and that our organization has no control over the content on that site. Our organization does not endorse or accept any responsibility for the content or use of any other linked app or site. If you decide to access any third party sites linked to this app, you do so entirely at your own risk.