Protecting your confidentiality

MIT Health protects your medical records consistent with state and federal law. MIT Health employees receive training on privacy and agree in writing to uphold our privacy practices. Trust is a critical component of how we work and what we do.

Your records: Safeguarded by law

The federal Health Insurance Portability and Accountability Act (HIPAA) and Massachusetts law require the protection of your medical information. This includes any information that could be used to identify you or that relates to your health condition, healthcare, or payment for healthcare.

MIT Health employees must adhere to HIPAA and to MIT Health’s own privacy policies, which provide for strict protection of your health information. These policies allow your health information to be used on a need-to-know basis for treatment, billing, and MIT Health’s internal operations such as quality improvement and training.

For more information about routine and non-routine uses and disclosures of your health information, see MIT Health’s Notice of Privacy Practices (PDF).


MIT Health partners with HIPAA-compliant nationwide health information networks, which allow us and participating providers to share your records in HIPAA-compliant ways so that you can get the care you need, wherever you are. To opt out of these services, download the following form and return it to the address listed on the form. 

Student-Provider Confidentiality

If you are an MIT student and are age 18 or older, we cannot share information about your medical care with parents or other family members unless you want them to be involved, or unless they need to be involved, such as in the case of a serious and imminent threat to the health or safety of you or others or a condition that renders you unable to make decisions about your own healthcare.

We encourage you to review our privacy practices. Notice of Privacy Practices for MIT Health (PDF)

If you have questions or concerns, please contact one of our privacy officers at