This privacy statement applies to information collected through the UMBC COVID-19 Daily Symptom Monitoring Form and the COVID-19 Off-Campus Test Result Reporting Form.
UMBC takes the security and privacy of your personal information very seriously. While we are required to collect information as a part of protecting our campus community, we respect the personal nature of the information we are gathering. For that reason, we are securing all information collected through UMBC’s COVID-19 Daily Symptom Monitoring Form and the COVID-19 Off-Campus Test Result Reporting Form with the same security measures that we use to protect social security numbers and other confidential information.
Who has access to the information and results I submit?
Only UMBC employees with direct responsibility for our COVID response processes have access to symptom monitoring and test result information. This includes groups like UMBC University Health Services and the UMBC COVID-19 Contact Response Team. As University employees, everyone with access to symptom monitoring and test result information is bound by the UMBC Policy on the Protection of Confidential Information. Employees with access to this information take the privacy of the information very seriously. Any violation of the UMBC Policy on the Protection of Confidential Information may result in disciplinary action against the employee.
How will my information be used?
Your information will only be used for operational activity related to protecting the health and safety of the UMBC community. We will ask for your consent before using the information for any other purpose.
How long will my information be retained?
Given that new information is being discovered every day related to how COVID-19 impacts a community, we do not have a firm retention time set for symptom monitoring and test result information. At this point, we plan to securely dispose of information as we determine that it is no longer needed to protect the health and safety of the University community. Furthermore, if we determine that we can maintain the long-term health and safety of the community with a reduced amount of data, we will take steps to redact, pseudonymize, encrypt, or delete information whenever possible.
Is this information protected under HIPAA?
The Health Insurance Portability and Accountability Act (HIPAA) only applies to health information in the hands of a Covered Entity. As related to the UMBC COVID-19 Daily Symptom Monitoring Form and the COVID-19 Off-Campus Test Result Reporting Form, UMBC’s relationship with the person submitting the form is that of an employer or educational institution. UMBC is not a Covered Entity under HIPAA as it relates to information submitted through the UMBC COVID-19 Daily Symptom Monitoring Form or COVID-19 Off-Campus Test Result Reporting Form.