Indian
Health
Service
Office
of
Information
Technology
Agreement
to
the
Personal
Health
Record
Terms
a
nd
Conditions
1
Terms
and
Conditions
Summary
The
Indian
Health
Service
(IHS)
created
an
online
web
site
called
the
Personal
Health
Record
(PHR).
The
PHR
website
is
where
you
can
view
your
health
information.
You
can
use
it
to
send
secure
email
messages
to
your
health
care
team.
To
access
the
PHR,
you
will
need
to
create
a
username
and
password.
You
will
ent
er
your
username
and
password
every
time
you
want
to
look
at
your
PHR.
You
will
have
five
chances
to
enter
the
correct
username
and
password
or
you
will
be
locked
out.
When
you
are
done
using
the
PHR
you
must
log
out.
This
prevents
someone
from
getting
into
your
account.
You
will
be
logged
out
of
the
PHR
after
10
minutes
of
no
activity.
The
information
in
the
PHR
is
to
help
you
make
better
healthcare
decisions.
It
is
not
intended
to
replace
the
advice
of
your
doctor.
Contact
your
medical
facility
if
you
see
errors
in
your
PHR.
The
PHR
account
may
be
made
on
a
patient
’s
behalf
(such
as
by
a
parent
or
guardian).
You
must
read
and
click
“
Accept
”
to
the
PHR
Terms
and
Conditions
for
the
patient.
The
IHS
makes
every
effort
to
protect
your
privacy.
Anyone
who
misus
es
your
information
may
face
criminal
and
civil
penalties.
IHS
does
not
sell
or
trade
your
personal
information.
IHS
may
contact
you
regarding
surveys,
questionnaires,
and
polls,
however
you
can
choose
not
to
participate
and
still
use
the
PHR.
You
can
also
choose
to
clos
e
your
PHR
account
at
any
time.
IHS
Privacy
Policy
The
Personal
Health
Record
(
PHR
)
application
is
a
web
application
of
the
Indian
Health
Service
(
IHS
).
The
web
application,
including
all
related
equipment,
networks,
and
network
devices
(spe
cifically
including
Internet
access)
are
provided
only
for
authorized
uses.
IHS
computer
systems
may
be
monitored
for
all
lawful
purposes,
such
as
ensuring
that
their
use
is
authorized;
managing
the
system;
protecting
against
unauthorized
access;
and
verif
ying
security
procedures;
survivability;
and
operational
security.
During
monitoring,
information
may
be
examined,
recorded,
copied
,
and
used
for
authorized
purposes.
Privacy
Act
Warning
You
do
not
have
to
provide
the
personal
information
requested
for
IHS
PHR
registration,
but
if
you
do
not,
IHS
will
be
unable
to
establish
a
PHR
account
for
you.
Your
decision
not
to
provide
this
information
will
not
have
any
effect
on
any
other
benefits
to
which
you
may
be
entitled.
The
IHS
make
s
every
effort
to
protect
your
privacy.
Certain
demographic
information,
such
as
your
name,
PHR
username,
date
of
birth,
health
record
number
(HRN
or
“Chart
Number”
),
gender,
and
zip
code
are
collected
to
provide
you
access
to
the
IHS
PHR
and
is
subject
to
the
Privacy
Act
of
1974,
as
amended
(5
U.S.C.
§
552a).
Only
authorized
persons
may
use
your
information
contained
in
the
IHS
PHR.
Any
unauthorized
disclosure
or
misuse
of
your
Indian
Health
Service
Office
of
Information
Technology
Agreement
to
the
Personal
Health
Record
Terms
a
nd
Conditions
2
information
may
result
in
criminal
and/or
civil
penalties.
Any
individual
may
file
a
civil
action
in
a
Fe
deral
District
Court
against
IHS
if
the
individual
believes
that
IHS
violated
the
Privacy
Act.
For
management
of
the
PHR,
information
is
collected
for
statistical
and
management
purposes.
The
IHS
PHR
uses
software
programs
to
create
anonymous,
summary
statistics,
which
are
used
for
such
purposes
as
assessing
what
IHS
PHR
information
and
services
are
useful
to
you
and
other
users,
determining
technical
design
specifications,
and
identifying
system
performance
or
problem
areas.
For
security
purposes
and
to
en
sure
that
this
service
remains
available
to
all
users,
IHS
PHR
uses
software
programs
to
monitor
network
traffic
to
identify
unauthorized
attempts
to
upload
or
change
information,
or
otherwise
cause
damage.
Except
for
authorized
law
enforcement
requests
or
investigations,
no
attempts
are
made
to
identify
individual
users,
to
link
an
individual
user
to
data
entered
in
IHS
PHR,
or
to
track
an
individual
user’s
usage
habits.
Unauthorized
attempts
to
upload
information
or
change
information
on
this
service
are
strictly
prohibited
and
may
be
punishable
under
federal
law.
The
Use
of
Cookies
The
IHS
PHR
application
does
not
use
“persistent
cookies”
to
retain
information
about
users
of
the
IHS
PHR.
The
IHS
prohibits
the
use
of
“persistent
cookies,”
a
type
of
web
technology
that
collects
user
-
identifying
information
over
time
and
across
different
websites.
PHR
My
Messaging
You
may
send
and
receive
secure
messages
within
your
PHR.
This
account
can
only
be
used
to
communicate
with
your
Indian
Health
System
health
care
team
through
the
My
Messaging
Menu
.
You
can
download
a
log
that
has
your
message
activity
with
your
health
care
team
through
My
Messaging.
Personal
E
-
mail
Address
The
IHS
reserves
the
right
to
contact
you
via
the
e-mail
address
you
provide
regarding
important
system
or
account
information,
major
changes
planned
for
the
IHS
PHR
or
for
other
system
-
related
needs.
The
IHS
will
only
use
your
e-mail
address
to
forward
you
materials
on
the
information
in
which
you
have
indicated
interest.
Your
e-
mail
address
may
also
be
used
to
send
you
reminders
for
forgotten
u
ser
names.
If
you
no
longer
wish
to
receive
these
emails
you
always
have
the
abil
ity
at
any
time
to
opt
out
of
the
IHS
PHR
.
Security
of
Information
At
all
times,
security
maintenance
and
administration
is
a
critical
element
of
website
operation
and
maintenance.
The
IHS
PHR
has
several
levels
of
security
to
protect
your
information.
When
you
type
in
your
personal
information,
IHS
PHR
establishes
a
secure
connection
with
your
browser
so
your
information
is
encrypted
or
scrambled
for
transmission
and
storage.
In
addition,
these
security
levels
comply
with
the
Privacy
Act
of
1974
as
amended
(5
U.S.C.
§
552a);
the
Health
Insurance
Portability
and
Accountability
Act
of
1996
(HIPAA)
(Pub.
L.
104-191,
Aug
21,
Indian
Health
Service
Office
of
Information
Technology
Agreement
to
the
Personal
Health
Record
Terms
a
nd
Conditions
3
1996,110
Stat.1936);
45
CFR,
Parts
160
and
164;
and
the
Health
Information
Technology
for
Economic
and
Clinical
Health
(HITECH)
Act
(Pub.
L.
111-5,
Feb
17,
2009).
Secure
Socket
Layer
/Transport
Layer
Security
Secure
Socket
Layer
(SSL)
/Transport
Layer
Security
(TLS)
is
a
security
protocol
which
provides
a
transmission
level
of
encryption
between
the
user’s
browser
and
the
IHS
PHR
server
machines.
SSL
/TLS
is
a
method
for
protecting
an
IHS
PHR
user’s
identification
and
password.
Personal
Responsibility
for
Personal
Information
You
have
access
to
the
information
contained
in
your
IHS
PHR
account,
and
as
such,
have
the
a
bility
to
disclose
information
in
this
account
to
other
individuals.
Registration
and
Lo
g
In
To
provide
certain
services
such
as
enabling
you
to
enter
personal
information,
IHS
will
require
your
username
and
password
for
identification.
To
view
any
medical
information
you
have
in
the
IHS
system
,
IHS
will
require
verification
of
your
identity.
Password
Protection
Your
PHR
account
is
password
protected.
You
will
have
five
chances
to
enter
the
correct
password
before
you
are
locked
out
of
the
system.
We
strongly
recommend
that
you
do
not
share
your
password
with
anyone
and
that
you
change
your
password
on
a
regular
basis.
Exercise
caution
by
securing
your
password.
The
IHS
will
never
ask
for
your
password
in
an
unsolicited
phone
call,
unsolicited
e-
mail
,
or
b
y
any
other
means
.
Logging
Out
You
must
log
out
when
you
are
finished
accessing
the
password
protected
PHR.
This
prevents
someone
else
from
accessing
your
account
if
you
leave
or
share
the
computer.
After
10
minutes
of
non-
activity
,
the
session
will
expire.
Exit
Site
Notice
The
IHS
PHR
has
links
to
other
organizations’
websites
such
as
the
National
Library
of
Medicine
to
provide
you
with
additional
health
information.
Once
you
link
to
another
site,
you
are
subject
to
the
privacy
and
security
policy
of
the
new
site.
IHS
is
not
responsible
for
content
on
other
websites.
Saving
of
Passwords
by
Browser
on
Public
Computers
Many
Internet
browsers
(such
as
Internet
Explorer,
Apple
Safari,
or
Google
Chrome)
allow
users
to
save
username
and
passwords.
When
prompted
by
a
browser
to
save
your
IHS
PHR
username
Indian
Health
Service
Office
of
Information
Technology
Agreement
to
the
Personal
Health
Record
Terms
a
nd
Conditions
4
and
password,
it
is
recommended
that
you
decline
this
option.
Saving
username
and
passwords
could
potentially
enable
persons
to
gain
access
to
your
personal
information.
Surveys,
Questionnaires,
and
Polls
The
IHS
PHR
may
use
surveys,
questionnaires,
and
polls
to
facilitate
feedback
and
input
from
our
users.
When
you
respond
to
surveys,
questionnaires
or
polls
related
to
our
site,
this
information
is
collected
only
as
anonymous,
aggregated
information
and
is
used
for
statistical
purposes.
No
survey,
questionnaire
or
poll
will
ever
ask
you
for
your
social
security
number
or
PHR
password.
Agreement
&
Disclaimers
I.
General
Disclaimer
The
IHS
provides
this
web
application
subject
to
the
following
Terms
and
Conditions.
You
must
agree
to
these
T
erms
and
Conditions
to
access
the
IHS
PHR.
The
IHS
PHR
is
an
IHS
w
eb
application
intended
for
use
by
the
Indian
Health
System
patients
for
viewing,
retrieving,
and
storing
personal
health
records.
Establishing
an
IHS
PHR
account
is
intended
for
eligible
Indian
Health
System
beneficiaries
,
including
American
Indians
and
Alaskan
Natives
of
the
United
States
and
their
advocates
.
All
site
information
resides
on
and
transmits
through
protected
federal
computer
systems
and
networks.
The
IHS
PHR
has
links
to
other
organizations’
websites
to
provide
you
with
additional
health
information
or
information
services.
Once
you
link
to
another
site,
you
are
subject
to
the
privacy
and
security
policy
of
the
new
site.
IHS
is
not
responsible
for
content
on
other
websites.
IHS
use
and
disclosure
of
your
health
information
is
limited
as
requ
ired
by
federal
law.
IHS
only
uses
the
specified
information
you
provide
as
agreed
to
in
these
T
erms
and
Conditions.
IHS
do
es
not
sell,
trade,
or
rent
users
’
personal
information
.
IHS
reserve
s
the
right
to
perform
statistical
analyses
of
user
behavior
and
characteristics
to
measure
interest
in
and
use
of
the
various
areas
of
the
site.
IHS
may
at
times
share
aggregate
information
(i.e.,
anonymous,
statistical
data)
about
our
users
within
the
IHS
for
quality
assurance
audits
and
IHS
PH
R
program
administrative
needs.
The
IHS
understands
that
the
privacy
and
security
of
your
information
is
important
to
you.
IHS
respect
s
your
privacy
and
has
taken
measures
to
provide
appropriate
levels
of
security
to
protect
your
personal
information.
Certain
information
about
your
account
may
be
shared
with
authorized
personnel
to
administer
the
IHS
PHR
program.
IHS
protects
the
information
you
provide
with
security
technology
based
on
current
computer
industry
standards,
and
applicable
Federal
guidelines.
II.
IHS
PHR
and
Your
IHS
He
alth
Records
Any
address
or
contact
information
you
enter
is
used
for
system
troubleshooting
and
related
correspondence.
Any
updates
you
make
to
your
contact
information
on
the
IHS
PHR
will
not
be
Indian
Health
Service
Office
of
Information
Technology
Agreement
to
the
Personal
Health
Record
Terms
a
nd
Conditions
5
submitted
to
IHS
or
updated
in
your
IHS
health
records.
To
make
corrections
in
your
health
record
,
you
must
contact
the
medical
facility
where
you
receive
care
to
update
your
official
health
record.
The
IHS
health
record
displayed
in
your
PHR
is
an
electronic
cop
y
of
your
official
health
record.
Your
health
rec
ord
that
is
stored
at
IHS
health
facilities
remains
the
official,
legal
,
and
authoritative
IHS
health
record.
III.
IHS
PHR
and
Any
Claim
for
Payment
with
the
Indian
Health
Service
The
PHR
may
not
be
used
to
notify
IHS
for
purposes
of
Purchased
and
Referred
Care
(formerly
Contract
Health
Service
)
eligibility,
referrals,
or
questions.
If
you
wish
to
file
a
claim
or
change
your
information
for
any
reason,
you
must
contact
your
local
IHS
health
care
facility.
IV.
Medical
Disclaimer
The
information
provided
by
the
IHS
PHR
is
based
on
your
official
health
record
at
the
time
it
was
last
updated
from
the
facility.
The
health
-
related
information
and
resources
available
through
the
IHS
PHR
are
not
intended
to
be
used
for
or
replace
the
advice
of
your
doctor,
your
current
medical
diagnosis,
or
your
current
treatment.
S
eek
advice
from
your
physician
or
other
qualified
health
care
provider
before
starting
new
treatment,
modifying
your
current
treatment,
or
to
ask
questions
about
a
medical
condition
or
disease.
The
information
provided
by
the
IHS
PHR
is
intended
to
help
you
and
others
make
better
healthcare
decisions
and
take
greater
responsibility
for
your
own
health.
H
ealth
care
recommendations
may
change
over
time
.
T
herefore
,
resources
contained
on
the
IHS
PHR
may
become
ou
tdated
and
not
current
with
accepted
medical
standards.
Always
consult
a
qualified
healthcare
professional
with
any
questions
or
concerns
you
may
have
regarding
your
medical
condition.
V.
Your
Obligations
The
IHS
PHR
is
an
IHS
web
application
intended
for
use
by
the
Indian
Health
System
patients
to
allow
for
the
creation
of
accounts
for
viewing,
retrieving,
and
storing
information
only,
except
as
otherwise
explicitly
authorized.
Your
health
information
resides
on
and
transmits
through
protected
federal
compute
r
systems
and
networks.
Your
use
of
the
IHS
PHR
means
you
understand,
accept
and
grant
your
unconditional
consent
for
authorized
IHS
personnel
to
review
and
take
action
including,
but
not
limited
to
,
monitoring,
auditing,
inspecting,
investigating,
restricting
access,
tracking,
sharing
with
authorized
personnel,
or
any
other
authorized
actions
by
authorized
IHS
and
law
enforcement
personnel.
If
your
PHR
account
reflects
incorrect
patient
information
you
must
contact
your
local
facility.
Threats,
attempts,
or
actions
to
modify
this
system,
deny
access
to
the
system,
gain
unauthorized
access
to
data,
breach
system
security
or
otherwise
damage
the
system
or
data
contained
within
are
strictly
prohibited.
T
hese
actions
may
result
in
criminal,
civil,
or
administrative
penalties
resulting
from
violations
of
federal
laws
including,
but
not
limited
to,
18
U.S.C.
§
1030
(Fraud
Indian
Health
Service
Office
of
Information
Technology
Agreement
to
the
Personal
Health
Record
Terms
a
nd
Conditions
6
and
Related
Activity
in
Connection
with
Computers)
and
18
U.S.C.§
2701
(Unlawful
Access
to
Stored
Communications).
VI.
Printing
You
may
choose
to
print
information
from
your
PHR
.
If
you
do,
you
are
advised
to
take
actions
to
protect
your
health
information.
Once
you
print
your
personal
information,
the
security
of
that
information
is
your
responsibility.
Remember
to
check
for
documents
on
printers
and
destroy
all
health
information
you
do
not
need.
VII.
Inactivating
Your
Account
You
may
choose
to
inactivate
your
IHS
PHR
account
at
any
time.
To
do
so
you
may
send
a
secure
PHR
message
or
go
to
your
loca
l
Indian
Health
System
facility
to
inactivate
your
account
.
If
you
go
to
an
IHS
facility
you
will
be
asked
to
put
your
request
in
writing.
Be
aware
that
once
inactivated
,
information
from
the
account
becomes
immediately
inaccessible
and
cannot
be
retrieved
.
VIII.
Agreement
By
clicking
“
Accept
”
below,
you
acknowledge
that
you
have
read
and
agree
to
all
of
the
terms
and
conditions
above.
If
the
PHR
account
is
being
created
for
an
unemancipated
minor,
a
parent,
guardian,
or
individual
acting
in
loco
parentis
must
read
and
click
“
accept
”
on
behalf
of
the
unemancipated
minor.
You
expressly
acknowledge
and
agree
that
neither
IHS
or
their
suppliers
are
responsible
for
the
results
of
your
decisions
resulting
from
the
use
of
the
service,
including,
but
not
limited
to,
your
choosing
to
seek
or
not
to
seek
professional
medical
care,
or
your
choosing
or
not
choosing
to
modify
or
terminate
specific
treatment
based
on
the
information
provided
by
this
online
service.
Further,
you
expressly
acknowledge
and
agree
that
representatives
from
the
IHS
PHR
program
and
the
IHS
may
contact
you
regarding
surveys,
questionnaires,
and
polls.
Your
participation
in
questionnaires
and
polls
is
voluntary
and
not
require
d
in
order
for
you
to
participate
in
IHS
PHR.
IX.
Changes
to
PHR
Terms
and
Conditions
The
PHR
Terms
and
Conditions
may
be
revised.
When
IHS
makes
a
change
that
affects
the
collection
and
use
of
your
personal
information,
IHS
will
update
and
post
the
revised
Terms
and
Conditions
on
the
IHS
PHR
home
page.
Upon
log-in
you
will
be
prompted
to
read
and
accept
the
new
Terms
and
Conditions.
You
must
accept
the
revised
Terms
and
Conditions
to
continue
using
your
IHS
PHR
account.
With
regard
to
the
PHR
account
of
an
unemancipated
minor,
a
parent,
guardian,
or
individual
acting
in
loco
parentis
must
accept
the
revised
Terms
and
Conditions
on
behalf
of
the
unemancipated
minor.
If
you
choose
not
to
accept
the
Terms
and
Conditions
you
will
not
be
allowed
to
complete
your
log
in.