Privacy Policy
The Data Bank Privacy Policy
The privacy of our customers has always been of utmost importance to the Data Bank. As a Federal agency, the Privacy Act of 1974 (5 U.S.C. 552a) requires us to protect certain information we collect from you. Specifically, if we collect information from you that will be placed in the National Practitioner Data Bank (NPDB) or the Healthcare Integrity and Protection Data Bank (HIPDB), we will provide a separate Privacy Act notice at the point of collection, identifying (1) the legal authority which authorizes the collection; (2) whether the disclosure of the information is mandatory or voluntary; (3) the principal purpose(s) for the information; (4) the routine uses of the information; and (5) the effects on you, if any, of not providing the requested information. The Federal Register notices, which describe the Privacy Act aspects of the NPDB and the HIPDB, can be found at 62 Fed. Reg. 12653 (1997) and 64 Fed. Reg. 7653 (1999), respectively. The privacy policy information below applies to the data we collect from you over the internet, regardless of whether it is also protected by the Privacy Act.
This is our notice to you about what personal information we collect; why we collect your personal information; how we use it; who we share it with; how to get access to your information; and how we protect the information we collect and maintain.
Information Automatically Collected and Stored
When you browse any website, information about your visit can be collected. We automatically collect and temporarily store the following information about your visit:
- The date and time of your visit.
- The website pages you visit.
- The IP address and screen resolution of the computer you used when you visit our site.
What Personal Information We Collect
We only collect enough information to serve the mission of the Data Bank. We collect the following personal information on subjects of NPDB and HIPDB reports and queries:
- Name.
- Date of Birth.
- Social Security Number.
- Mailing Addresses.
- Phone Numbers.
- E-mail Addresses.
- Education Records.
Why We Collect Your Personal Information
Information is vital to the existence of the Data Bank. Without collecting the information contained in the Data Bank our mission could not be fulfilled. This information facilitates the tenets of our mission, including protecting the public and providing quality health care.
- We do not use the information for any other purpose.
- We only collect the information necessary to fulfill our mission. No other information is collected.
How We Will Use Your Personal Information
The personal information you give us at this website will be used only in connection with the administration and execution of the Data Bank mission of protecting the public and providing quality health care.
Who We Will Share Your Personal Information With
Personal information is only provided to registered organizations with Federal authority to query the Data Bank(s). Information is not shared with any other non-registered third-party organizations with the exception of plaintiffs' attorneys. If a practitioner is reported, a Subject Notification Document (SND) will be mailed to the practitioner.
A plaintiff's attorney or a plaintiff representing himself or herself is permitted to obtain information from the NPDB under special circumstances. Defense attorneys are not permitted access to the NPDB under law. However, the defendant practitioner may self-query the NPDB. Specific procedures for attorney requests are identified at http://www.npdb-hipdb.hrsa.gov/pract/informationForAttorneys.jsp.
Your Access to the Information We Collect About You
NPDB and HIPDB information is not available to the general public. However, persons or organizations may request information in a form that does not identify any particular organization or practitioner.
The information from the NPDB is available to State licensing boards; hospitals and other health care organizations; professional societies; certain Federal agencies; and others as specified in the law to provide information on the professional competence and conduct of physicians, dentists, and, in some cases, other health care practitioners. Hospitals are the only health care organizations with mandatory requirements for querying the NPDB. Practitioners may self-query the NPDB regarding themselves at any time.
Federal and State government agencies and health plans are eligible to query the HIPDB. Health care practitioners, providers, and suppliers may self-query the HIPDB.
Additionally, a plaintiff's attorney or a plaintiff representing himself or herself is permitted to obtain information from the NPDB under special circumstances. Defense attorneys are not permitted access to the NPDB under law. However, the defendant practitioner may self-query the NPDB. Specific procedures for attorney requests are identified at http://www.npdb-hipdb.hrsa.gov/pract/informationForAttorneys.jsp.
How We Protect the Security of the Information We Collect
The internet was originally designed as an open system with no built in security; however, we are required to protect the information we collect and maintain about you and will not use the internet to do business with you unless we can do so in a secure manner.
- We have extensive security controls that are tested and reviewed continually.
- We are certified and accredited by Health Resources and Services Administration (HRSA).
Protecting Your Personally Identifiable Information (PII)
The Data Bank is committed to protecting your privacy and your PII. In accordance with HHS and HRSA policy, the Data Bank will not accept or send unencrypted PII via email or fax.
PII sent to the Data Bank must be transmitted in a secure and confidential manner. To aid in this effort, we recommend the following options:
- Contact the Data Bank Customer Service Center at 1-800-767-6732 to discuss IQRS Secure Messaging or email encryption options.
- Send all documents containing PII via US Mail or FedEx.
Our Use of "Cookies" and How It Affects Your Visit to Our Website
What is a "cookie"? A cookie is a small piece of text that is sent to your computer along with a Web page when you visit a website. Your computer will give the information in the cookie only to the computer that sent it, and no other website can request it.
The Data Bank does not use cookies.
If You Visit Other Websites
Our website contains links to commercial and Federal organizations' websites. These websites are not within our control and may not follow the same privacy, security or accessibility policies. Once you link to another site you are subject to the policies of that site. However, all Federal websites are subject to the same Federal privacy, security or accessibility mandates as ours.
Contacting the Data Bank
Please refer to Customer Service if you have questions regarding this privacy policy.
