The Office of Compliance
Protected Health Info folder

Privacy

Welcome to the Weill Cornell Medicine Privacy Office. WCM is committed to protecting the privacy of personal information. The Privacy Team partners with the WCM community to support appropriate data access practices, safeguard WCM data and address data privacy concerns.

Privacy Overview

The Privacy Team is committed to the transparent use of personal data which meets the highest ethical standards and regulatory requirements. The Privacy Office in collaboration with business owners provides training, education, policies and procedures, investigations, best practices, and guidance to the WCM community.

Learn More

Release of Information

The Release of Information (ROI) Office is committed to the timely and appropriate access to information.  A valid authorization is required for medical records request. The ROI office provides guidance and support to the WCM community on health information request, access, and disclosures.

Learn More

Privacy Agreements

The Privacy Agreements team is committed to the appropriate use, access, and disclosure of information.  The Privacy Office serves as the subject matter expert, providing guidance and support to the Weill Cornell Medicine community on privacy agreements and data sharing guidelines.

Learn More

Privacy FAQs

How do I Report a Privacy Incident?

Report suspected privacy incidents as soon as possible through the organization’s privacy incident reporting system or by promptly reporting to the Privacy Office directly.

Reports may be submitted through https://compliance.weill.cornell.edu/privacy/submit-privacy-incident or by contacting the Privacy Office at 646-962-6930 or Privacy@med.cornell.edu.

What is Care Everywhere?

Care Everywhere is an Epic feature that allows participating healthcare organizations using Epic to electronically exchange patient health information for permitted purposes, such as treatment. It may allow an authorized provider to view relevant records from another participating healthcare organization, including test results, medications, allergies, diagnoses, and visit information.

Patients who have questions about their HIE participation or consent status should contact privacy@med.cornell.edu.

I No Longer Want to Participate in the Health Information Exchange (HIE). What Do I Do?

You may change your HIE authorization choice at any time. Contact the Privacy Office at 646-962-6930, Monday through Friday from 9:00 a.m. to 5:00 p.m., or email privacy@med.cornell.edu for assistance.After your current authorization status is updated, you may be asked to complete the Care Everywhere and HIE authorization form again at your next visit to document your new choice.

My Medical Records are Incorrect. What Do I Do?

If you believe information in your medical record is incorrect or incomplete, you may request an amendment by contacting the Privacy Office at 646-962-6930 or privacy@med.cornell.edu. The Privacy Office will provide an Amendment Request Form for you to complete and return.Your request will be reviewed and processed within 30 days of receipt. Please note that submitting a request does not guarantee that the record will be changed. If your request is denied, you will receive information about the decision and your available options.

How Do I Obtain a Copy of My Medical Records?

You may view and request copies of your outpatient medical records through your Weill Cornell Connect account.You may also complete an Authorization to Release Health Information form and submit it using one of the following methods:Email: medicalrecords@med.cornell.edu. For assistance, contact the Release of Information Unit at 646-692-9820.

How do I Submit a Compliance Question or Compliant?

To submit a question or complaint to the Compliance Office, please contact us at compliance@med.cornell.edu or by phone at (646) 962-7539.

What is Health Information Exchange (HIE)?

A Health Information Exchange (HIE) is a broader electronic network that enables participating healthcare providers and organizations to securely share patient health information. An HIE may connect organizations that use different electronic health record systems.Patients who have questions about their HIE participation, consent status, opting out and breaking links should contact privacy@med.cornell.edu.

What is a privacy incident?

A privacy incident involves any potential breach, which is any unauthorized access to, including use or disclosure of patient information, that compromise the security or privacy of the PHI.

Submit Compliance Incident

Weill Cornell Medicine The Office of Compliance 575 Lexington Avenue, 9th Fl New York, NY 10022 Phone: (866)-293-3077