1. Introduction
   
   At Cerritos College Student Health Center, we are committed to protecting your privacy. This SMS Privacy Policy explains how we collect and use your mobile information. This policy is an addendum to our standard Notice of Privacy Practices and FERPA/HIPAA disclosures.
   
   
2. Mobile Information Collection and Use
   
   We collect your mobile phone number only when you voluntarily provide it to us (e.g., via intake forms or student portals). We use this information strictly for the following purposes:
   • • Appointment reminders and scheduling updates.
     • Health-related alerts and notifications.
       
       
3. 3rd Party Sharing Disclosure   
   
   No Third-Party Sharing: Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
   
   
4. Opt-In and Opt-Out Instructions  
   
   Opt-In: By providing your mobile number, you authorize Cerritos College Student Health Center to send text messages to your mobile device. Consent is not a condition of treatment.  
   
   Opt-Out: You can cancel the SMS service at any time. Just text "STOP" to (833) 535-4600. 
   
   After you send the SMS message "STOP" to us, we will send you an SMS message to confirm that you have been unsubscribed. After this, you will no longer receive SMS messages from us.  
   
   Help: If you are experiencing issues with the messaging program you can reply with the keyword "HELP" for more assistance, or you can get help directly by contacting Student Health via emailCopy Email Address or (562) 860-2451 ext. 2321
   
   
5. Message Frequency and Rates
   
   Message frequency varies based on your appointment schedule and health needs. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages.

The Cerritos College Student Health Services maintains a strict confidentiality and privacy policy to protect your medical and psychological information

Confidentiality Statement

Clients have a right to privacy in Cerritos College Student Health Services. Protected health information (PHI) and treatment records are confidential and is not part of your academic record. No one on campus has a right to see your PHI or have the knowledge that you are receiving treatment without your written permission. There are legal exceptions to our practices in maintaining confidentiality, which can be viewed under our Notice of Privacy Practices. Aside from these exceptions, only Student Health Services staff may have access to your health-related information.

Mental Health Confidentiality Statement 

Your therapist must keep all mental health services content and records confidential unless you give written consent or a legal/ethical exception applies (e.g., imminent harm, mandated reporting). This duty is part of the therapist’s professional license and ethical code.

There are some limitations to confidentiality. The limitations to confidentiality are connected to care of the student or of endangered populations (minors, dependent adults, elders) when there is a significant risk of safety to the client or others. The law requires us to report abuse or neglect of minors, dependent adults, and elders.

Notice of Privacy Practices 

Cerritos College Student Health Services is a confidential clinic, and the privacy of each patient’s protected health information (PHI) is maintained. Apart from Cerritos College Student Health Services staff, and specifically noted exceptions, PHI is not accessible to anyone without your written permission.

The law allows Cerritos College Student Health Services to use or disclose health information for treatment, payment, health care operations, notification/communication with family (in emergency circumstances), and health oversight activities.  

Explanation of Specific Exceptions: 

The law allows Cerritos College Student Health Services to use or disclose your PHI without written authorization for the following purposes: 

1. 1. Required by law: 
      
      The law requires medical staff to report  
      
      • Risk of serious harm to yourself or others
      • Abuse or neglect of vulnerable populations
      • Domestic violence, including injury or illness resulting from a firearm, physical or sexual abuse
      • Response to judicial or administrative proceedings (e.g. subpoenas), or to law enforcement officers (e.g. court orders).
        **Exceptions to reporting include mental health therapists are not required by law to report domestic violence or sexual assault to authorities.
        
        
   2.  Treatment:
      
      We may use or disclose health information about you to provide you with treatment or services. For example, information may be shared with our doctors, nurse practitioners, nurses, medical assistants, and other health care personnel to create and carry out a plan for your treatment.  We may, at your request and with your permission, share information with providers outside of our system who may be involved in your treatment.
      
      
   3. Health Care Operations:
      
      We may use and disclose health information about you for health care operations.  For example, we may use your information to review the quality of health services you receive. This information is anonymized and is for internal review purposes only.
   4. Public health:
      
      On occasion, the law requires medical staff to report a client’s health information to public health authorities for reasons related to: preventing or controlling disease; injury or disability; reporting abuse or neglect; reporting problems with products and reactions to medications to the Food and Drug Administration; and reporting disease or infection exposure to the Los Angeles County Public Health Department.

Right to Request Special Privacy Protections:

You have the right to request restrictions on certain uses and disclosures of your health information. We reserve the right to accept or reject these requests and will notify you about our decision. 

Right to Request Confidential Communications:

You have the right to communication with respect to your PHI in a specific manner. You may want us to call and leave messages on your cell phone only. You may also communicate with us through secure confidential message via your Point & Click (PNC) Student Health Portal (HIPAA compliant).  

Right to Inspect and Copy:

Through your Point & Click (PNC) Student Health Portal you have direct access to secure messaging from your electronic medical records. You have the right to request the entirety of your health records at any time.

Student Health Services may charge you a processing fee. Your health record will be destroyed 7 years after your last visit here. For minors, records must be kept for seven years after the minor reaches the age of 18. There may be limited circumstances under which we would deny your request for access, and this decision will be discussed with you at the time of your request.

Right to Amend or Supplement:

You have a right to amend PHI that you believe to be incorrect or incomplete. We reserve the right to deny your request. At your request for amendment, we will review the amendment process. 

Right to Accounting of Disclosures:

You have the right to receive an accounting of certain types of disclosures for the PHI we have made. 

Right to Paper Copy of Notice of Privacy Practices:

You have the right to a paper copy of the Notice of Privacy Practices. 

Right to Choose Someone to Act for You:

You have the right to choose someone to act for you, for example by giving them medical power of attorney.  A legal guardian or person with medical power of attorney can make choices about your health information.  We will verify that this person has authority before we take any action. 

Right to Request Us to Share Information:

You have the right to ask us to share information with your family, close friends or others involved in your care. If you cannot tell us your preference, for example if you are unconscious, we may share your information if we believe it is in your best interest. 

Right to Revoke Your Authorization:

There may be other disclosures of your health information that will require your written authorization.  You generally have the right to revoke an authorization.

Right to Complain about Violation of Rights:

If you feel your rights have been violated, you have the right to file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights (OCR). You can email OCR at OCRMail@hhs.gov, call toll-free at: 1-800-368-1019, TDD: 1-800-537-7697 or visit www.hhs.gov/ocr/privacy/hipaa/complaints/. If you are concerned that Student Health Services has violated your privacy rights, or if you disagree with a decision made about access to your records, you also may contact management at via emailCopy Email Address or at (562) 860-2451, ext. 2321. You will not be penalized for filing a complaint.