Confidentiality
The National Center for Health Statistics (NCHS) takes the security and confidentiality of the data we collect, especially personally identifiable information (PII), very seriously. In fact, we have a legal requirement to ensure the protection of these data.
NCHS and its agents are required by law to keep all data regarding patients and facilities strictly confidential and to use these data only for research and statistical purposes as stated by Section 308(d) of the Public Health Service Act [42 United States Code 242m (d) and Section 513 of the Confidential Information Protection and Statistical Efficiency Act (Pub. L. No. 115-435, 132 Stat. 5529 § 302]. Willful unauthorized disclosure of confidential information is punishable as a Class E felony with fines of up to $250,000 and 5 years imprisonment, or both. This penalty applies to both NCHS staff and its agents.
All NCHS contractors are agents and under legally binding agreements to comply with all requirements for safeguards, access, and disclosure. NCHS staff and its agents are required to complete annual training on confidentiality requirements and practices—including reporting any breach of confidentiality– and to sign annual non-disclosure agreements confirming intention to abide by all rules and regulations protecting confidential data. Contractor organizations are required to meet the same administrative, physical, and technical safeguards as NCHS and to agree in writing to the same restrictions and obligations with respect to safeguarding confidential information collected in NHCS.
The Health Insurance Portability and Accountability Act (HIPAA) of 1996 permits disclosure of protected health information without patient authorization for public health purposes. The ERB at CDC’s NCHS has reviewed and approved all aspects of this study. Participating facilities may rely on the approval of the NCHS ERB for NHCS data activities.
Results of NHCS will be published only in an aggregated manner and all data will be used only for research and statistical purposes.
NHCS participation is voluntary.
These materials provide additional information on confidentiality and data protections of hospitals participating in NHCS and the data they send NCHS:
Additional information about confidentiality can be found on the Frequently Asked Questions webpage.