We have a legal and ethical responsibility to safeguard the privacy of all patients and protect the confidentiality of their health information. Use of protected health information is restricted to those who have a legitimate need to use it for treatment, payment, or other routine health care operations. Most other disclosures require patient authorization. Individuals are required to follow privacy policies and to report any suspected breaches of patient privacy policies to the Information Security and Privacy Office. Contact your supervisor or the Information Security Privacy Office with questions or concerns about privacy or security issues. Privacy policies, as well as the Confidentiality and Information Security Agreement are located at http://www.privacy.utah.edu/ .