THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
University of Colorado Health (“UCHealth”) is required by law to maintain the privacy of your health information and provide you a description of our privacy practices. This notice applies to any hospital or health care facility that UCHealth operates, whether directly or through one of its subsidiaries, including members of the UCHealth Affiliated Covered Entity members that may be found at www.uchealth.org. This notice applies to all UCHealth employees, staff, volunteers, students, trainees and others whose conduct, in the performance of work for UCHealth, is under the direct control of UCHealth, whether or not they are paid by UCHealth.
This notice also functions as a Joint Notice of Privacy Practices as it applies to other health care providers that offer clinically integrated health care services with UCHealth at UCHealth facilities as part of an Organized Health Care Arrangement (OHCA), of which UCHealth may participate. OHCAs allow the organizations within the OHCA to disclose PHI to the other entities within the OHCA, subject to HIPAA, to carry out joint health care operation activities under an organized system of health care, such as conducting quality assessment and improvement activities, utilization review, and other activities that support and improve healthcare operations. A list of other health care providers in an OHCA with UCHealth for which this notice operates as Joint Notice of Privacy Practices may be found here. However, this notice only applies to the privacy practices of these health care providers when they are providing care at a UCHealth facility. It does not apply to the privacy practices of these providers in their own offices or other health care settings. UCHealth will share your information with these other providers as described in this notice.
Your Rights
You have certain rights when it comes to your health information. This section explains your rights and some of our responsibilities to help you. Several of these rights are fulfilled by our Health Information Management department. Visit: https://www.uchealth.org/access-my-health-connection/medical-records-uchealth/ for further information.
Get an electronic or paper copy of your medical record
- You can ask to see or get an electronic or paper copy of your medical record and other health information we have about you. We may require you to do this in writing. We will provide you with a copy of your health information or a summary if you prefer. We may charge a reasonable, cost-based fee.
- We may deny your request for some of your health information. If we deny your request, we will inform you in writing why we denied it, how you may have the denial reviewed in certain instances, and how you may file a complaint regarding our decision.
Ask us to amend your medical record
You can ask us to amend health information about you that you think is incorrect or incomplete. We may deny your request, but if we do, we will tell you why in writing.
Request confidential communications
You can ask us to contact you in a specific way (for example, ask us to contact you at work instead of your home) or to send mail to a different address. We will accommodate all reasonable requests.
Ask us to limit what we use or share
- You can ask us not to use or share certain health information for your treatment, our payment, or our operations. We are not required to agree to your request, but if we don’t agree, we will tell you why in writing. Even if we agree to your request, we may not follow it in an emergency. We may also change our decision in the future, but if we do, we will tell you in writing. The change will only apply to your health information we create or receive after we notify you of the change.
- If you pay for a service or health care item out-of-pocket and in full, you can ask us not to share that information with your health insurer if it is for a payment or operations purpose. The request must be in writing and we will approve your request unless we are required by law to share that information.
Get a list of those with whom we have shared information
- You can ask for a list (accounting) of the times we have shared your health information for up to six years from the date you ask, who we shared it with, when and why. We will include all the disclosures except for those about treatment, payment, health care operations, and certain other disclosures, including any you asked us to make.
- We will provide one accounting a year for free but will charge a reasonable, cost-based fee if you ask for another one within 12 months.
Get a copy of this notice
You can ask for a paper copy of this notice at any time, even if you have agreed to receive the notice electronically. We will provide you with a copy. You may print or view a copy of it by visiting: https://www.uchealth.org/privacy-policy.
Choose someone to act for you
We may disclose your information to a person named as your medical power of attorney or legal guardian. We will make sure the person has this authority and can act for you before we take any action.
File a complaint if you feel your rights are violated
- To ask questions, express concerns, or file a complaint, contact our Privacy Officer at: Compliance Department, 2450 South Peoria Street, Aurora, Colorado 80014; by email at [email protected]; by phone at 855.824.6287.
- You can also file a privacy or civil rights complaint with the U.S. Department of Health and Human Services’ (DHHS) Office for Civil Rights (OCR), electronically through the OCR Complaint Portal, available at https://ocrportal.hhs.gov/ocr/portal/lobby.jsf or by mail or phone at: U.S. DHHS, 200 Independence Avenue, SW Room 509F, HHH Building Washington, D.C. 20201; 1-800-368-1019 or 1-800-537-7697 (TDD). Complaints to the Office for Civil Rights must be filed within 180 days of when you learn of, or should have known about, the violation.
- We will not retaliate against you for filing a complaint.
Your Choices
In certain situations, you can tell us your choices about what we share. If you have a clear preference for how we share your information in the situations described below, let us know.
- Reminding you that you have an appointment for care.
- Sharing information with your family, close friends, or others involved in your care or payment for your care.
- Sharing information for disaster relief purposes with entities authorized to assist in disaster relief efforts.
- Including your information in a hospital directory. If you ask not to be listed in the directory, no information will be provided to anyone asking about you. This may prevent visitors, mail, flowers, or other gifts from reaching you.
- Providing your religious affiliation to a member of the clergy, such as a priest, rabbi, or pastor.
- Contacting you for fundraising efforts. You can tell us not to contact you again by following the instructions we send you when you are contacted. If we have your substance use disorder patient records, subject to 42 CFR part 2, we will give you clear and obvious notice in advance and a choice about whether to receive fundraising communications that use your Part 2 information.
- Sharing your health information through health information exchange (“HIE”). HIE organizations allow your health information to be made available for treatment, payment and operations purposes with other health care providers and health plans outside of UCHealth. HIEs maintain safeguards to protect your information.
If you cannot or do not tell us your preferences (for example, if you are unconscious or do not indicate a preference to us) we may share your information if we believe it is in your best interest. We may also share your information when needed to lessen a serious and imminent threat to health or safety.
Our Uses and Disclosures
We are permitted to use or share your health information in the following ways:
To treat you
We can use your health information and share it with other professionals to provide, coordinate and manage your health care and related services. For example, information about your visit may be provided to your primary care physician, with payers for quality management purposes relating to your treatment, or with other providers or organizations to allow you to receive care remotely or have virtual visits with our clinical staff.
For our operations
We can use and share your health information to run our organization, improve your care, and contact you when necessary. For example, we may use your information to review your treatment, evaluate the performance of the staff caring for you, or share with students being trained in the organization.
To bill for your services or other payment reasons
We can use and share your health information to bill and get payment from health plans or other entities. For example, we give information about you to your health insurance plan so it will pay for your services. We may also query your insurance plan to determine the best, most effective drug to prescribe for you.
Future communications
We may communicate to you via newsletters, mailings, or other means regarding treatment options, health related information, disease-management programs, wellness programs, research projects, or other community-based initiatives or activities in which we participate.
Business associates
Some of the services provided to you are performed on our behalf by outside vendors called Business Associates. We will disclose your health information to our Business Associates to allow them to perform these services for us. For example, we may contract with a copy service company to provide you copies of your health record. Business Associates are required by federal law to safeguard your information.
How else can we use or share your health information?
We are allowed or required to share your information in ways that contribute to the public good such as public health and research. We have to meet certain conditions in the law before we can share your information for those purposes.
Help with public health and safety issues. We can share health information about you for certain public health and safety situations such as preventing disease; helping with product recalls; reporting adverse reactions to medications; reporting suspected abuse, neglect, or domestic violence; and preventing or reducing a serious threat to anyone’s health or safety.
Research. We may use or disclose your health information for research studies but only when the researchers meet all federal and state requirements to protect your privacy. You may also be contacted to participate in a research study.
Comply with the law. We will share information about you if state or federal laws require it, including with the federal Department of Health and Human Services if it wants to see that we’re complying with federal privacy law.
Substance use disorder treatment records. To the extent we have substance use disorder patient records about you, subject to 42 CFR part 2, we may be more limited in the ways in which we can use your information. Further, we will not share that information for investigations or legal proceedings against without (1) your written consent or (2) a court order and a subpoena.
Respond to organ and tissue donation requests. We can share health information about you with organ procurement, banking or transplantation organizations for the purpose of facilitating organ, eye, or tissue donation and transplantation.
Coroners, medical examiners and funeral directors. We may share health information with a funeral director as necessary to carry out their duties including arrangements after death, or with coroners and medical examiners to identify the deceased, determine a cause of death, or as otherwise authorized by law.
Workers’ compensation, health oversight and government authorities. We can use or share health information about you for workers’ compensation claims and with health oversight agencies for activities authorized by law and for special government functions such as military, national security, and presidential protective services.
Law Enforcement. We may disclose health information to a law enforcement official for purposes such as to respond to a search warrant, identify a suspect, fugitive or missing person, report a death believed to be a result of criminal conduct, or report a crime committed on our property. We may also disclose health information to correctional institutions or law enforcement officials under certain circumstances if you are in custody.
Lawsuits and legal actions. We may disclose your information in response to a valid court or administrative order. We may also disclose your information in response to certain types of subpoenas, discovery requests, or other lawful processes.
Our Responsibilities
We must follow the duties and privacy practices described in this notice and give you a copy of it. We will not use or share your information other than as described here unless you tell us in writing that we can. If you tell us we can, you may change your mind at any time by notifying us in writing. We will notify you promptly if a breach occurs that may have compromised the privacy or security of your health information.
Authorization Required. In the following cases, we won’t share your information unless you give us written permission:
- Marketing purposes, except if we talk with you in person or give you a promotional gift of little value from a company we work with, like a pen or notebook.
- Sale of your information.
- Most sharing of psychotherapy notes, which are private notes maintained by your psychiatrist or psychologist.
Substance use disorder treatment records. We maintain records for patients treated in alcohol and drug use treatment programs that are specifically protected by federal law and regulations. Certain UCHealth facilities that treat these patients are required to comply with restrictions in addition to what is listed in this notice. A summary notice that includes these restrictions will be provided to you at the time you are admitted to one of these programs.
Revisions to this Notice. We reserve the right to change the terms of this Notice at any time. If we do, the changes will apply to all information we have about you. The new Notice will be available upon request, in our facilities and clinics, and on our website.
See hhs.gov/ocr/privacy/hipaa/understanding/consumers/noticepp.html for more information on your rights and our responsibilities.
You can file a complaint with our Chief Privacy Officer at [email protected] or by calling 303-752-8582.
You can also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, electronically through the Office for Civil Rights Complaint Portal at https://www.hhs.gov/hipaa/filing-a-complaint/index.html, or by mail or phone at:
Departamento de Salud y Servicios Humanos de EE. UU.
200 Avenida de la Independencia, SW
Sala 509F, Edificio HHH
Washington, D.C. 20201
1-800-368-1019, 800-537-7697 (TDD)
Effective: April 22, 2026
Language Assistance
- ATTENTION (English): Language assistance services, free of charge, are available to you.
- ATENCIÓN (Spanish): si habla español, tiene a su disposición servicios gratuitos de asistencia lingüística.
- CHÚ Ý (Vietnamese): Nếu bạn nói Tiếng Việt, có các dịch vụ hỗ trợ ngôn ngữ miễn phí dành cho bạn.
- 注意(Chinese):如果您使用繁體中文,您可以免費獲得語言援助服務。
- 주의(Korean): 한국어를 사용하시는 경우, 언어 지원 서비스를 무료로 이용하실
- ВНИМАНИЕ (Russian): Если вы говорите на русском языке, то вам доступны бесплатные услуги перевода.
- ማስታወሻ (Amharic): የሚናገሩት ቋንቋ ኣማርኛ ከሆነ የትርጉም እርዳታ ድርጅቶች፣
- ملحوظة:(Arabic) إذا كنت تتحدث اذكر اللغة، فإن خدمات المساعدة اللغویة تتوافر لك بالمجان.
- ACHTUNG (German): Wenn Sie Deutsch sprechen, stehen Ihnen kostenlos sprachliche Hilfsdienstleistungen zur Verfügung.
- ATTENTION (French): Si vous parlez français, des services d’aide linguistique vous sont proposés gratuitement
- नेपाली(Nepali) :ध्यानाकर्षणः तपाईँलाई भाषा सहायता सेवाहरु निःशुल्क उपलब्ध छन्
- PAUNAWA (Tagalog): Kung nagsasalita ka ng Tagalog, maaari kang gumamit ng mga serbisyo ng tulong sa wika nang walang bayad.
- 注意事項 (Japanese):日本語を話される場合、無料の言語支援をご利用いただけます。
- XIYYEEFFANNAA (Cushite/Oromo): Afaan dubbattu Oroomiffa, tajaajila gargaarsa afaanii, kanfaltiidhaan ala, ni argama.
- توجھ (Persian/Farsi): توجه: اگر به زبان فارسی صحبت می کنید، خدمات یاری رسانی زبانی، بطور رایگان، در
- Dè ɖɛ nìà kɛ dyéɖé gbo (Kru/Bassa): Ɔ jǔ ké m̀ [Ɓàsɔ́ ɔ̀ -wùɖù-po-nyɔ̀ ] jǔ ní, nìí, à wuɖu kà kò ɖò po-poɔ̀ ɓɛ́ ìn m̀ gbo kpáa
- Ntị (Ibo): Ọ bụrụ na asụ Ibo, asụsụ aka ọasụ n’efu.
- AKIYESI (Yoruba): Bi o ba nsọ èdè Yorùbú ọfé ni iranlọwọ lori èdè wa fun yin o.