Beu Health Center

Patient Rights and Responsibilities

Medical records are confidential and are not released to anyone, including parents, spouse, friends and/or University personnel without the written consent of the patient.

The Patient has a Right:

  • To be treated with respect and dignity and be provided with courteous, professional care, without discrimination due to race, religion, gender, cultural practices, ethnicity, disability, sexual orientation or HIV status;
  • To obtain from the healthcare provider complete and current information about your diagnosis,treatment and prognosis in terms that the patient can reasonably be expected to understand. When it is medically inadvisable to give such information to the patient,the information will be made available to an appropriate person on the patient's behalf;
  • To participate in decisions regarding your healthcare treatment; and to have one's cultural beliefs and traditions respected in the treatment process.
  • To a safe environment with suitable privacy;
  • To know the names, credentials and positions of the people providing treatment;
  • To have fees and conditions of service explained to you at the time of service and to receive an itemized receipt for services rendered;
  •  To have access to information concerning health education, self care, and prevention of illness and to be informed of the personal responsibilities involved in seeking treatment and maintaining health and well being;
  • To refuse treatment, and be informed of the potential medical consequences resulting from such a refusal;
  • To expect that communication and records pertaining to his/her healthcare are confidential and will be protected as such, except in such instances where disclosure is required by law;
  • To consent to or withhold consent regarding the release of confidential records and individually identifiable treatment information to outside parties; except in such instances where required by law. The process of consent and the option for refusal will be explained to clients upon request;
  • To communicate any grievances or suggestions about the care or services received through the patient satisfaction survey, suggestion boxes or patient advocate without being terminated from services;
  • To request a second opinion or a referral to a higher level  of care; 
  • To change healthcare provider if other qualified providers are available;
  • To reasonable attempt to communicate in the language or manner primarily used by the patient.

The Patient has a Responsibility:

  • To give your practitioner complete and honest information about your past and present health, mental health and/or addiction symptoms and to inform the practitioner of any lifestyle, health or mental health issues that could affect your health or the health treatment plan;
  • To assist your health care provider in compiling a complete record by authorizing the Health Center to obtain necessary information from appropriate sources;
  • To inform your provider about any living will, medical power of attorney, or other directive that could affect your care;
  • To understand and follow the treatment plan prescribed by your healthcare provider and to discuss any difficulties or questions you might have adhering to the treatment plan or to following health care provider recommendations;
  • To ask questions and seek clarification regarding areas of concern; and to weigh the consequences of refusing to comply with instructions and recommendations;
  • To act in a respectful and considerate manner with Health Center personnel and patients;
  • To arrive at your appointments on time or give timely notice of cancellation, so that other patients may utilize that time;
  • To abstain from alcohol and/or the use of non-prescribed or illegal drugs prior to presenting for scheduled appointments as well as to use prescribed medication in the dosages recommended by your healthcare provider.
  • To accept your role in managing your own wellness and to make choices in your daily life that reinforce the choice of wellness and balance in the areas of nutrition, appropriate sleep, physical activity and entertainment;
  • To fulfill financial obligations for care and services at the time services are rendered;
  • To perform all administrative functions with regards to filing his/her insurance claims, whether via student health insurance or outside vendors.

Privacy of Your Health Information

Beu Health Center maintains records of your health information. These records will be either education records or treatment records under FERPA, both of which are excluded from coverage under the HIPAA Privacy Rule.

The term "education records" is broadly defined under FERPA to mean those records that are: (1) directly related to a student and (2) maintained by an educational agency or institution or by a party acting for the agency or institution.

"Treatment records" under FERPA are: records on a student who is eighteen years of age or older, or is attending an institution of postsecondary education, which are made or maintained by a physician, psychiatrist, psychologist, or other recognized professional or paraprofessional acting in his professional or paraprofessional capacity, or assisting in that capacity, and which are made, maintained, or used only in connection with the provision of treatment to the student, and are not available to anyone other than persons providing such treatment, except that such records can be personally reviewed by a physician or other appropriate professional of the student's choice. For example, treatment records would include health or medical records that Beu Health Center maintains only in connection with the provision of treatment to an eligible student.

"Treatment records" are excluded from the definition of "education records" under FERPA. However, it is important to note, that Beu Health Center may disclose an eligible student's treatment records for purposes other than the student's treatment provided that the records are disclosed under one of the exceptions to written consent under 34 CFR § 99.31(a) or with the student's written consent under 34 CFR § 99.30. If we disclose an eligible student's treatment records for purposes other than treatment, the treatment records are no longer excluded from the definition of "education records" and are subject to all other FERPA requirements, including the right of the eligible student to inspect and review the records. See the Official University Policy Manual: Policy on Family Educational Rights and Privacy Act of 1974 (Notification to Students)

Under FERPA, treatment records are not available to anyone other than professionals providing treatment to the student, or to physicians or other appropriate professionals of the student's choice. However, this does not prevent Beu Health Center from allowing a student to inspect and review such records. If we choose to do so, such records are no longer excluded from the definition of "education records" and are subject to all other FERPA requirements.

Student in Waiting Room

Under FERPA, can eligible student treatment records be shared with parties other than treating professionals?

As previously stated, treatment records, by definition, are not available to anyone other than professionals providing treatment to the student, or to physicians or other appropriate professionals of the student's choice. However, this does not prevent Beu Health Center from using or disclosing these records for other purposes or with other parties. If Beu Health Center chooses to do so, a disclosure may be made to any party with a prior written consent from the eligible student or under any of the disclosures permitted without consent in 34 CFR § 99.31 of FERPA. Disclosures may be subject to additional requirements including but not limited to Illinois Mental Health and Developmental Disabilities Confidentiality Act 740 ILCS 110/1 et seq., AIDS Confidentiality Act, 410 ILCS 305/1 et seq.and Confidentiality of Alcohol and Drug Abuse Records, 42 CFR Part 2.

For example, a Beu physician treating an eligible student might determine that treatment records should be disclosed to the student's parents. This disclosure may be made if the eligible student is claimed as a dependent for federal income tax purposes. If the eligible student is not claimed as a dependent, the disclosure may be made to parents, as well as other appropriate parties, if the disclosure is in connection with a health or safety emergency. Once the records are disclosed under one of the exceptions to FERPA's general consent requirement, the treatment records are no longer excluded from the definition of "education records" and are subject to all other FERPA requirements as "education records" under FERPA.

Under what circumstances does FERPA permit student treatment records to be disclosed to a third-party health care provider for treatment?

An eligible student's treatment records may be shared with health care professionals who are providing treatment to the student, including health care professionals who are not part of or not acting on behalf of the educational institution (i.e., third-party health care provider), as long as the information is being disclosed only for the purpose of providing treatment. In addition, your treatment records may be disclosed to a third-party health care provider when you have requested that your records be reviewed by a physician or other appropriate professional of your choice. In either of these situations, if the treatment records are disclosed to a third-party health care provider that is a HIPAA covered entity, the records would become subject to the HIPAA Privacy Rule. The records at Beu Health Center continue to be treatment records under FERPA, so long as the records are only disclosed by the institution for treatment purposes to a health care provider or to the student's physician or other appropriate professional requested by the student.

If the disclosure is for purposes other than treatment, an eligible student's treatment record only may be disclosed to a third party as an "education record," that is, with the prior written consent of the eligible student or if one of the exceptions to FERPA's general consent requirement is met. For example, if the University is served with a court order requiring the disclosure of the mental health records of a student maintained as treatment records at the Beu Health Center, the University may disclose the records to comply with the court order in accordance with the provisions of FERPA regulations. However, the mental health records that the university disclosed for non-treatment purposes are no longer excluded from the definition of "education records" and are subject to all other FERPA requirements as "education records" under FERPA.

Are all student records maintained by Beu Health Center "treatment records" under FERPA?

Not all records on eligible students that are maintained by Beu Health Center are treatment records under FERPA because many such records are not made, maintained, or used only in connection with the treatment of a student. For example, billing records that Beu Health Center maintains on a student are "education records" under FERPA, the disclosure of which would require prior written consent from the eligible student unless an exception applies. In addition, records relating to treatment that are shared with persons other than professionals providing treatment to the student i.e. immunization records for compliance with the Illinois College Immunization Act are "education records" under FERPA. Thus, to the extent Beu Health Center has shared a student's treatment information with persons and for purposes other than for treatment, such information is an "education record," not a treatment record under FERPA.

Does FERPA permit Beu Health Center to disclose a student's treatment records or education records to law enforcement, the student's parents, or others if the institution believes the student presents a serious danger to self or others?

An eligible student's education records and treatment records (which are considered education records if used or made available for any purpose other than the eligible student's treatment) may be disclosed, without consent, if the disclosure meets one of the exceptions to FERPA's general consent rule. See 34 CFR § 99.31. One of the permitted disclosures is to appropriate parties, which may include law enforcement or parents of a student, in connection with an emergency if knowledge of the information is necessary to protect the health or safety of the student or other individuals. There are other exceptions that apply to disclosing information to parents of eligible students that are discussed on the "Safe Schools & FERPA" Web page, as well as other information that should be helpful to school officials, at: http://www2.ed.gov/policy/gen/guid/fpco/ferpa/safeschools/index.html .

What protections apply to non-student records?

The health records of non-students are not subject to FERPA, but may be subject to HIPAA or State law. Beu Health Center does provide services for spouses and domestic partners of eligible students and limited services for employees (first aid, injections, respirator fit testing), but does not perform HIPAA covered transactions on these records. These nonstudent records are protected under applicable State law. 

Are the health records of an individual who is both a student and an employee of a university at which the person receives health care subject to the privacy provisions of FERPA or those of HIPAA?

The individual's health records would be considered "education records" protected under FERPA and, thus, excluded from coverage under the HIPAA Privacy Rule. FERPA defines "education records" as records that are directly related to a student and maintained by an educational agency or institution or by a party acting for the agency or institution. While FERPA excludes from this definition certain records relating to employees of the educational institution, to fall within this exclusion, such records must, among other things, relate exclusively to the individual in his or her capacity as an employee, such as records that were created in connection with health services that are available only to employees. Thus, the health or medical records that are maintained by Beu Health Center as part of its provision of health care to a student who is also an employee of a university are covered by FERPA and not the HIPAA Privacy Rule.

What about Student Health Benefits records?

Student health insurance plans are exempt from the definition of a group plan or individual plan under the Employee Retirement Income and Security Act of 1974 (ERISA), 29 U.S.C. 1002(1)), and therefore not subject to requirements of HIPAA. These records are subject to all other FERPA requirements as "education records" under FERPA.
Effective Nov, 2008

Adapted from: Joint Guidance on the Application of the Family Educational Rights and Privacy Act (FERPA) And the Health Insurance Portability and Accountability Act of 1996 (HIPAA) To Student Health Records, November 2008