Health Information Management Division

Introduction
The NIH Clinical Center (CC) is committed to protecting the privacy of CC patient information contained in NIH information systems. The CC Health Information Management Department (HIMD) uses BOX, an NIH approved third party secure file sharing service, to send/ receive forms to registered CC patients. The NIH agency's Privacy Policy, but does not apply. In this instance, the BOX Privacy Policy applies and is located at https://www.box.com/legal/privacypolicy.

Purposes and Use of Information We Collect from You
This Privacy Notice explains the collection and use of Personally Identifiable Information (PII) about you through the CC HIMD Website. The BOX application presents a form and asks for your name, your e-mail and an open text message. The information collected reflects the minimum necessary to accomplish the purpose of uploading the signed Authorization for the Release of Medical Information form, and other patient completed authorization forms (patient portal consents, etc.) to the CC Health Information Management Department.

By using the third-party BOX Website to send signed document(s) to the NIH CC Health Information Management Department, you may be providing nongovernmental third-parties with access to PII and/or sensitive information. Please note that by voluntarily providing your information and uploading documents into this site, you are accepting the practices described in this Privacy Notice and consent to the collection, storage, and use of personal information about you as described in this Notice. Use of this service is optional. If you do not wish to use this service, but still wish to send the signed document, you may mail the document to CC Health Information Management Department, 10 Center Drive, Room B1L400, MSC 1192 Bethesda, MD 20892 or fax to 301-480-9982.

Security of Information
At all times, security maintenance and administration is an important part of website operations and maintenance. BOX maintains approved physical, electronic and procedural safeguards to comply with federally approved standards to guard your nonpublic personal information. The system uses appropriate administrative, technical and physical controls for protection of information contained therein and is protected by multiple firewalls, vulnerability scanning, and advanced encryption technology. Access to your information requires entry of a personalized username and password by CC HIMD staff. In non-routine circumstances, system administrators at BOX may have incidental exposure to your information during unexpected events such as data recovery.

Contact Us
If you have any questions or concerns regarding this Privacy Notice, please call the CC Health Information Management Department (HIMD) at 1-888-790-2133.