Skip to Content

View Additional Section Content


This Notice of Privacy Practices (“Notice”) explains how University of Missouri Health and its affiliates (collectively “MU Health”) will use information about you and when MU Health can share that information with others. Please review it carefully.

If you have any questions, please contact the Privacy Officer at (573) 882-3293.

Who will follow this notice? 

The list below tells you who will follow the outlined practice for keeping your medical record private.

  • All hospitals, clinics, physician practices, and affiliates that are part of MU Health.
  • Any MU Health health care provider that treats you at any of our locations.
  • All MU Health employees, temporary or contract staff, students and volunteers.

What is this notice?

We are required by law to maintain the privacy of your protected health information (PHI). We are also required by law to give you this notice of our legal duties and privacy practices regarding your health information. We are required to notify you if there is a breach of your unsecured PHI. We are required to follow the terms of the current Notice of Privacy Practices. It informs you about your rights as a valued customer. You may opt out of provisions in this notice by notifying the registration employee at the point of care or the Health Information Services department.

How we may use and disclose your health information

We may use and disclose your health information for:

Treatment: Information obtained by a nurse, physician, or other member of your health care team will be recorded in your record and used to determine the course of treatment. Members of your health care team will record the actions they took, their observations, and their assessments. In that way, your health care team will know how you are responding to treatment. We will also provide your physician or a subsequent health care provider with copies of various reports that should assist him or her in treating you once you are discharged from our facilities.

Health Care Operations: We may use and disclose PHI for activities that MU Health engages in to operate its business, such as quality assurance, case management, receiving and responding to patient comments and complaints, physician reviews, compliance programs, audits, business planning, conducting disease management, and other population health management programs and activities, which may include development and the management of health outcomes and the identification of opportunities to improve the health of individuals or groups of individuals. In addition, we will use information to study health care and health care delivery and implement quality improvement initiatives.

Payment: A bill will be sent to you and/or a third-party payer (insurance company). The information on the bill may include information that identifies you, as well as your diagnosis, procedures, and supplies used. We may provide copies of the applicable portions of your medical record to your insurance company in order to validate your claim.

Other uses and disclosures: We may use and disclose health information for the following purposes:

Appointment Reminders: To remind you that you have an appointment scheduled with us. Please note if you would like these reminders to be provided to you via text message and or your personal email, these are not secure forms of transmission. We will honor your request;, however, any change to the email address and or telephone number is the responsibility of the patient to notify MU Health. MU Health is not responsible for the transmission reaching the incorrect individual if you have not updated the information.

Treatment Alternatives: To inform you of:

  • New/existing services, programs, upcoming events
  • New/existing staff – doctors, leadership
  • Health information
  • Research updates
  • Marketing research

As required by Law: When required to do so by applicable law.

To prevent a Serious Threat to Health or Safety: We can share health information about you to prevent a serious threat to your health and safety or the health and safety of others. For public health activities such as prevention or control of disease, reporting births and deaths, and reporting child abuse and neglect.

Individuals Involved in your Care: Unless you object, to friends, family members or others involved in your medical care or who may be helping pay for your care. Your health care provider may ask your permission or may use his or her professional judgment to determine the extent of that involvement. In all cases, your health care provider may discuss only the information that the person involved needs to know about your care or payment for your care.

Law Enforcement: We will share information about you when permitted to do so by applicable law.

Decedents: Health records for patients deceased 50 or more years ago are no longer considered Protected Health Information.

Genetic Information: Genetic information is considered Protected Health Information, which may be disclosed without authorization but cannot be used by health plans for underwriting purposes.

Military and Veterans: If you are a member of the armed forces, we may disclose information as required by military command authority.

Health Oversight Activities: To governmental agencies and boards as authorized by law such as licensing and compliance purposes.

Business Associates: We may disclose your PHI to contractors, agents and other associates who need this information to assist us in carrying our business operations. Our contracts with them require that they protect the privacy of your PHI in the same manner as we do.

Facility Directory: Unless you notify us that you wish to opt out, MU Health will release your name and location to the general visiting public while you are a patient in a MU Health facility. In addition, your religious affiliation will be made available to the visiting clergy. The directory includes information about your location and general condition.

Research: We may use and disclose your PHI for research purposes subject to the requirements of applicable law. We may disclose information to researchers when their research has been approved by the MU Health Institutional Review Board (“IRB”). The IRB reviews the research proposals and establishes protocols to ensure the privacy of your PHI. Authorizations for research may be combined in the research context subject to certain requirements, and authorizations for future research are also permitted.

Respond to Organ and Tissue Donation Requests: If you are an organ donor, we may release PHI to organizations that handle organ procurement or organ, eye, or tissue transplantation or to an organ donation bank, as necessary to facilitate organ or tissue donation and transplantation.

Work with a Medical Examiner or Funeral Director: We may disclose PHI to funeral directors or coroners consistent with applicable law to carry out their duties.

Address Workers’ Compensation: For workers’ compensation purposes or similar programs providing benefits for work related injury or illness.

Fundraising: MU Health entities and its affiliates may contact you as part of a fundraising effort. The information used for this purpose will not disclose any health condition but may include your name, address, phone number, email address, etc. When contacted, you may opt out of any future fundraising requests.

Respond to Lawsuits and Disputes: In response to a warrant, court order, or other lawful process your PHI will be released.

Breach Notification: An impermissible use, access or disclosure of PHI is presumed to be a breach unless it is demonstrated that there is a low probability that the PHI has been compromised based on a risk assessment. If MU Health determines a breach has occurred with your PHI, you will be notified via mail of the breach.

Disaster Relief: Unless you object, to disaster release organizations to coordinate your care or notify family and friends of your location or condition following a disaster.

Inmates or Other Individuals in Custody: If you are an inmate or in the custody of law enforcement, we may disclose to the correctional institution or law enforcement official as necessary to provide you with health care, to protect the health and safety of you and others, or for the safety and security of the correctional institution.

Sale of PHI: MU Health and its affiliates will not sell your PHI.

Public Health Activities: For public health activities such as preventing or control of disease, reporting births and deaths, and reporting child abuse and neglect.

National security and intelligence activities: Your PHI may be disclosed to authorized federal officials for intelligence and other national security activities as authorized by law.

Protective services for the president and others: Your PHI may be disclosed to federal officials to provide protection to the president and other authorized persons, or conduct special investigations.

Psychotherapy notes: With certain exceptions, we are not allowed to use or disclose psychotherapy notes without your authorization, including a disclosure to a health care provider other than the originator of the notes, for treatment purposes.

Marketing: We are not authorized to use or disclose your PHI for marketing purposes without your authorization.

Other uses and disclosures

Other uses and disclosures of your PHI not described in this Notice of Privacy Practices or applicable laws will require your written authorization. If you choose to permit us to use or disclose your PHI, you can revoke that authorization by informing Health Information Services of your decision in writing. If you revoke your authorization, we will no longer use or disclose your PHI as set forth in the authorization. However, any use or disclosure of your PHI made in reliance on your authorization before it was revoked will not be affected by the revocation.

Electronic Health Information Exchange 

MU Health participates in an electronic Health Information Exchange (HIE) provided through the Tiger Institute Health Alliance. The HIE facilitates the transmission of your PHI among providers who are members of the HIE and providing medical treatment to you. The HIE stores your data in a secured repository for member providers who currently or may treat you in the future. The health care professionals that access your PHI have established a treatment relationship with you. In order for health care providers to provide the most comprehensive care for patients, the Tiger Institute Health Alliance HIE will join other HIEs and Health Networks that may store and contain your PHI. The HIE may also provide critical information about you for other lawful purposes, such as to educate providers who manage the care of others like you. In those cases where your specific consent or authorization is required by law to disclose your medical record to others, MU Health will not disclose that information through the HIE without first obtaining your written consent.

As our patient, your PHI is automatically available in the HIE. If you do not wish to have your information shared in the HIE, you must opt out of the HIE. To opt out of the HIE, you will need to opt out in writing by requesting, completing and signing a form available from the Health Information Services department. For more information, visit our website at

If your PHI contains sensitive data (HIV, psychotherapy notes, etc.) and you want to participate in the HIE, you will need to sign a consent form. This can be completed at your next appointment during the registration process or by contacting the Health Information Services department.

Use and disclosure for facility directory

Unless you notify us that you wish to opt out, MU Health will release your name and location to the general visiting public while you are a patient in a MU Health facility. In addition, your religious affiliation will be made available to the visiting clergy. The directory includes information about your location and general condition.

Your rights regarding your health information

When it comes to your health information, you have certain rights. Although your PHI is the physical property of MU Health, the information belongs to you. You have the right to:

Get a copy of this privacy notice: You can request a paper copy of this notice at any time.

Get an electronic or paper copy of your medical record: You can inspect and obtain a paper or electronic copy of your PHI usually within 30 days of your written request. If your PHI is not readily producible in the format you request, it will be provided either in our standard electronic format or as a paper document. We may charge you a reasonable cost-based fee for the labor associated with providing you with access. If we deny your request to review or obtain a copy of your PHI, you may have the right to have that denial reviewed by a licensed health care provider who was not directly involved in the denial of your request, and we will comply with the outcome of that review.

Ask us to correct your medical record: You can request an amendment (correction) to your PHI if you believe information is incorrect or incomplete. Your request to amend your PHI may be denied if it was not created by us; if it is not part of the information maintained by us; or if we determine that the information is correct. You may submit a written appeal if you disagree. Your request for amendment will be included as a part of your PHI.

Request confidential communications: You can request communications of your PHI by alternative means or at alternative locations. For example, you may request that we send correspondence to a post office box rather than your home address. You have the right to request that your PHI be given to you in a confidential manner. You have the right to request that we communicate with you in a certain way or at a certain location, such as by mail or at your workplace. Any such request must be made in writing to Health Information Services. We will accommodate reasonable requests.

Ask us to limit what we use or share: You can request a restriction on certain uses and disclosures of your information; however, MU Health is not required to agree to such a request if the facts do not warrant it. You can revoke your authorization to use or disclose PHI except to the extent that action has already been taken. If you pay for a service out-of-pocket in full, you can request that information not be shared for the purpose of payment or our operations with your health insurer. Please note when your medical record is released by MU Health, any pictures contained in the record will also be included.

Get a list of those with whom we’ve shared information: You can obtain a list (an accounting of disclosures) of the times we have shared your PHI without authorization for six years prior to the date you asked, who we shared it with, and why, subject to certain exceptions set out in federal regulations. The first list you request in a 12 month period is free. If you make more requests during that time, you may be charged our cost to produce the list. We will tell you about the cost before you are charged.


If you believe that your privacy rights may have been violated, you may contact our Privacy Office at (573) 882-3293 or DC054.00, One Hospital Dr., Columbia MO 65212.

You can call our Ethics and Compliance Hotline at (866) 447-9821.

You may also call (573) 751-6303 and/or the State Attorney General’s Office Consumer Hot Line: (800) 392-8222.

You may file a complaint with the U.S. Department of Health and Human Services Office of Civil Rights at:

The Privacy Office can provide the mailing address.

We will not retaliate against you for filing a complaint.

Changes to this notice

If we change our policies regarding our use and/or disclosure of your PHI, we will change our Notice of Privacy Practices and make the revised notice available to you on our website and at our practice locations. You may access our website at You may also request a paper copy of the current Notice of Privacy Practices at any time.

Health Information Exchange


A free personalized website that will connect loved ones during illness and recovery. Learn more.