Compliance & Privacy Office
Protected Health Info folder

Privacy

Welcome to the Weill Cornell Medicine Privacy Office. WCM is committed to protecting the privacy of personal information. The Privacy Team partners with the WCM community to support appropriate data access practices, safeguard WCM data and address data privacy concerns.

Privacy Overview

The Privacy Team is committed to the transparent use of personal data which meets the highest ethical standards and regulatory requirements. The Privacy Office in collaboration with business owners provides training, education, policies and procedures, investigations, best practices, and guidance to the WCM community.

Learn More

Release of Information

The Release of Information (ROI) Office is committed to the timely and appropriate access to information.  A valid authorization is required for medical records request. The ROI office provides guidance and support to the WCM community on health information request, access, and disclosures.

Learn More

Privacy Agreements

The Privacy Agreements team is committed to the appropriate use, access, and disclosure of information.  The Privacy Office serves as the subject matter expert, providing guidance and support to the Weill Cornell Medicine community on privacy agreements and data sharing guidelines.

Learn More

Privacy FAQs

How do I Report a Privacy Incident?

For questions regarding privacy incidents please contact the Privacy Office at Privacy@med.cornell.edu or call (646) 962-6930.

What is Care Everywhere and Health Information Exchange (HIE)?

  • Care Everywhere is a functionality within Epic, our electronic medical records system, that allows our providers to electronically exchange patient medical information. This exchange only works within Epic with other institutions' Epic systems.
  • Health Information Exchange (HIE) allows doctors, nurses, pharmacists, other health care providers and patients to appropriately access and securely share a patient’s vital medical information electronically—improving the speed, quality, safety and cost of patient care.

I No Longer Want to Participate in the Health Information Exchange (HIE). What Do I Do?

Patients have the ability to change their  authorization  choice at any time. You can  contact  our Privacy Office by calling 646-962-6930  during the hours of 9am to 5pm  or email  privacy@med.cornell.edu  for assistance. Once the Privacy Office  provides you with assistance and terminates your current authorization status, you will be asked to sign the form again at your next visit by the check-in staff. At that visit, you will be able to provide your updated authorization choice.

My Medical Records are Incorrect. What Do I Do?

To request changes to your medical records please contact the Privacy Office at 646-962-6930 or privacy@med.cornell.edu. We will send you an Amendment Request Form for you to fill out and return to the Privacy Office. Your request will be reviewed and processed within 30 days of receipt.

How Do I Obtain a Copy of My Medical Records?

You can request your outpatient medical records online through your Connect account.

You can also fill out the Authorization to Release PHI form (available in English or Spanish, see above). Completed forms can be emailed to medicalrecords@med.cornell.edu or sent by fax to (646) 962-0635. You may also mail the form to the Release of Information unit:

Weill Cornell Medicine
Release of Information Unit
Box 303
New York, NY 10065

The Release of Information Unit can also be reached by phone at (646) 962-9820.

How do I Submit a Compliance Question or Compliant?

To submit a question or complaint to the Compliance Office, please contact us at compliance@med.cornell.edu or by phone at (646) 962-7539.

Submit Compliance Incident

Weill Cornell Medicine Compliance & Privacy Office 575 Lexington Avenue, 9th Fl New York, NY 10022 Phone: (866)-293-3077