Commission on Accreditation for Health Informatics
and Information Management Education
Privacy Policy
The Commission on Accreditation for Health Informatics and Information Management Education (“CAHIIM,” “we,” or “us”) has created and posted this privacy policy in an effort to maintain efficient service while respecting your privacy and protecting your personal information. This privacy policy covers the following topics:
Information Collection
This privacy policy applies to information that CAHIIM collects (i) on the CAHIIM Website (Site); (ii) through other platforms used in connection with the services that we provide; and (iii) by telephone, email, text message, letter, or other methods of communication. When you use our services, we collect information provided voluntarily as well as information collected automatically, as described in detail below.
Information Provided Voluntarily
- Enrollment, Registration, and Order Form Information: In order to enroll in or register for a CAHIIM program, or attend CAHIIM events, meetings, or conferences, you will be required to fill out a registration or order form and provide personal information, which we will use to process your registration or order. In certain circumstances, a program, event, meeting, or conference accessed through the Site may be jointly sponsored or co-sponsored with another organization. If the enrollment or registration is handled by such other organization, that organization’s (not CAHIIM’s) privacy policy will apply and be controlling. Please note that CAHIIM is not responsible for the privacy policies of such other organizations or their collection, use, sharing, or other processing of your personal or other information, and CAHIIM hereby disclaims any liability or responsibility in connection therewith.
- Payment Information: If you choose to enroll in or register for a CAHIIM program, or attend CAHIIM events, meetings, or conferences, we and/or our third-party payment processors will collect your payment information, including, but not limited to, your credit or debit card number, card verification value (CVV) number, and expiration date.
- Accredited Entity or Prospective Accredited Entity. We will collect information that you provide to us, which we will use in a manner consistent with the CAHIIM Accreditation Manual.
- Peer Reviewer Information: We will collect personal information that you provide to us, including, but not limited to, [your name; e-mail addresses;]. Such information is necessary to facilitate your access to, use of, information for your use in performing the peer reviewer function.
Information Collected Automatically
- Automated Information: Your Web browser or mobile device automatically provides information when you visit the Site, including, but not limited to, your Internet Protocol (IP) address or unique device identifier
- Cookies: Cookies are pieces of stored information on a user’s computer or device that are tied to information about the user and used to provide smoother navigation throughout the Site, such as to store a saved password; to identify user trends, such as page views; and for other internal purposes, such as to assess the effectiveness of the Site. The Site uses session ID cookies, which terminate when a user closes the browser. You will be asked to consent to the use of cookies in accordance with this privacy policy when you visit the Site. You have the option of setting your computer to disable cookies or to alert you when cookies are being used. If you choose to disable cookies, please be aware that portions of the Site may not function properly.
- Log Files: Log files store information such as a user’s IP address, browser type, Internet Service Provider (ISP), referring/exit pages, platform type, date/time stamp, and number of clicks. Like most Websites, the Site uses log files to analyze trends, administer the Site, and track users’ movement on the Site.
Children’s Information
The Site and our services and products are not directed toward children under the age of 16. We do not knowingly collect information from children. If we become aware that a child has provided us with information without parental consent, that information will be deleted from our records.
Information Use
CAHIIM uses the information that we collect to provide our services and to operate our business. We may use and store such information for legitimate and lawful business purposes, for example, in order to:
- provide a service you requested;
- notify you of CAHIIM official business, news, activities, programs, events, meetings, conferences, and services;
- track event, meeting, and conference attendance;
- prepare invoices and process payments;
- respond to communications and inquiries that you send to us; and
- for other legitimate and lawful business purposes.
For individuals located in the European Economic Area (EEA), we rely on multiple legal bases to collect, use, share, or otherwise process your personal data, including that:
- you have given consent, which you may withdraw at any time
- it is necessary for us to perform a contract with you;
- it is necessary for us to comply with legal obligations;
- it is necessary for our or a third party’s legitimate interest;
- it is necessary for us to perform a task in the public interest or for our official functions; and/or
- it is necessary to protect someone’s life.
To the extent we rely on our legitimate interests as a legal basis to collect, use, share, or otherwise process your personal data, those interests include, for example: providing a service you requested; notifying you of CAHIIM official business, news, activities, programs, events, meetings, conferences, and services; tracking event, meeting, and conference attendance; preparing invoices and processing payments; responding to communications and inquiries that you send to us; and promoting the function, safety, and security of our services.
Information Sharing
Personal information may be given to a third party in order to complete a specific business transaction on behalf of CAHIIM. Such transactions may include the following:
- Your name and contact information, as provided to CAHIIM, may appear on registration or attendee lists distributed at CAHIIM programs, events, meetings, and conferences to other attendees, including members, and other third parties, including, but not limited to, exhibitors or sponsors. We are not responsible for use or misuse of your personal information by exhibitors, sponsors, or the like.
- We may share your personal information with third parties that provide services to CAHIIM including, but not limited to, administration/operation support; marketing, promotions, and communications; program, event, meeting, or conference enrollment, registration, planning, hosting, or management; Website hosting; database management; payment card processing; or other data processing.
- We also may disclose personal information if we become subject to a subpoena, court order, or law enforcement or other government agency inquiry or investigation or if we are otherwise legally required to disclose such information. We also may use and disclose information about you to establish or exercise our legal rights, to assert and defend against legal claims, or if we believe such disclosure is necessary to investigate, prevent, or take other action regarding actual or suspected illegal or fraudulent activities or potential threats to the physical safety or well-being of any person.
- If all or part of CAHIIM is merged into or otherwise transferred to another entity, we may transfer the personal information you provided to us to such entity as part of that transaction.
Access to and Control of Information
CAHIIM takes your privacy and the protection of your personal information seriously, and we will provide you with reasonable access to and control of the personal information that you have provided to us. You may request to update your personal information or to opt in to or opt out of any service offerings at any time.
For individuals located in the EEA, you may have additional rights concerning your personal data, such as to access, obtain a copy of, correct, or delete that information or to withdraw your consent or object to the collection, use, sharing, or other processing of that information. To make any request with respect to your personal information, please contact CAHIIM as set forth below in the “CAHIIM Contact Information” section.
Data Security
We employ reasonable physical, electronic, and procedural security measures to safeguard your personal information and to help protect against unauthorized access and disclosure. Online registration information, such as payment card information, will be secured using a commercially accepted method of encryption. However, please be aware that no method of electronic transmission is completely infallible, and we cannot guarantee its absolute safety. We encourage you to use reasonable care in how you handle and disclose your personal information, user name(s), and password(s). If you become aware of any breach of Site security, please contact us immediately.
Data Retention
CAHIIM retains your personal information for as long as necessary to fulfill the purposes for which it was collected as set forth in this privacy policy, after which we will securely destroy or delete such personal information from our records unless otherwise required by law. We will retain and use information as necessary to comply with legal obligations, resolve disputes, enforce agreements, and as otherwise set forth in this privacy policy.
Data Transfer
If you are visiting the Site from outside the United States, please be aware that you are sending information, including personal data, to the United States where our servers are located. That information may then be transferred within the United States or to other countries outside the United States other than your country of residence. Countries other than your country of residence, including the United States, may have data privacy and protection laws that differ from, and potentially provide less protection than, the applicable laws in your country of residence.
To the extent that CAHIIM may be deemed to have transferred personal data outside of the EEA, we rely on multiple legal bases for doing so. For individuals located in the EEA: (i) you consent to our use of your personal information in accordance with this privacy policy, including the transfer of your information across international boundaries to jurisdictions anywhere in the world as permitted by applicable law, when you provide your personal information; (ii) we will use the standard contractual data protection clauses adopted by the European Commission, which provide safeguards for the transfer of such data, in connection with the provision of certain services that involve such transfers; and (iii) we may obtain separate consent in connection with the provision of certain services that involve the transfer of personal data.
Our collection, use, sharing, and other processing of your personal information will at all times be governed by this privacy policy.
External Links
There are external links to other Websites throughout the Site. Please note that CAHIIM is not responsible for the privacy policies of those other Websites and hereby disclaims any liability or responsibility in connection with such linked Websites.
Privacy Policy Updates
Should any changes be made to this privacy policy, we will post them on this page with an appropriate explanation.
Acceptance of Privacy Policy Terms
Using the CAHIIM Site indicates your acceptance of our privacy policy. Your continued visits to the CAHIIM Site after changes are posted to this policy will signify your acceptance of those changes.
CAHIIM Contact Information
If you have questions or concerns about this privacy policy or how we process personal information, or if you would like to exercise any of the legal rights set forth in this policy, please contact us at:
Commission on Accreditation for Health Informatics and Information Management Education
200 East Randolph Street, Suite 5100
Chicago, IL 60601
Telephone: (312) 235-3255
Email: info@cahiim.org
January 2020