MIIC Data Privacy
Related Topics
MIIC and Data Privacy
The Minnesota Immunization Information Connection (MIIC) protects the privacy of the records it collects and provides options to people for changing their or their child’s MIIC record privacy settings.
- Immunization Data Sharing, HIPAA, and MIIC
Immunization Information Systems and HIPAA (Health Insurance Portability and Accountability Act) guidelines. - The Family Educational Rights and Privacy Act (FERPA) and Immunization Data
Information for schools on the federal Family Educational Rights and Privacy Act (FERPA) as it relates to immunization data.
How immunization records get into MIIC
A MIIC immunization record can be created in two different ways.
- The Office of Vital Records at the Minnesota Department of Health (MDH) shares birth certificate data with MIIC, which creates a MIIC immunization record.
- A clinic or healthcare facility reports an immunization to MIIC, which creates a new MIIC record if one does not already exist. After that, any future data submitted to MIIC will be added to that record. This allows MIIC to combine immunization information from multiple providers to create a single record.
How immunization records are protected
Protecting the privacy of people is very important to MIIC and MDH. MIIC is password-protected and accessible only by authorized users. The data in MIIC are classified as private and protected by the Minnesota Immunization Data Sharing Law, Minnesota Statues, Section 144.3351. Provider organizations participating in MIIC must sign a data use agreement that outlines privacy and security terms for using MIIC. Authorized users are also required to sign a user agreement that outlines privacy and security terms.
Changing the privacy setting of a MIIC record
You always have the option to change the privacy settings of your or your child's immunization record in MIIC at any time. Options include:
MDH or another public health agency may use MIIC to help them identify recommended immunization and remind you about these immunizations. You may choose to decline these immunization reminders.
A person may decide to have their MIIC record "locked" to their current healthcare provider. Once a MIIC record is locked it cannot be viewed by other organizations, including other healthcare providers, schools, and childcares. Anyone who decides to lock their MIIC record may elect to unlock the record at any time or have it locked to a different healthcare provider.
A person may decide to opt-out of participating in MIIC. After a person opts-out of MIIC, their record is locked so it is not available to any MIIC users. The record is not deleted because that is the only way to ensure the record is not recreated by a participating organization. Anyone who initially decides to opt-out may elect at a later time to opt-in. There is no penalty to choose not to participate in MIIC.
A person may decide to opt-out and purge their MIIC record. When a record is purged, all immunization information is deleted from the record and no information will be released to any authorized user, for any reason. However, certain pieces of demographic information must be kept on file in order to assure that new immunization information reported cannot be added to the record. Information from a purged record cannot be recovered.
A person may decide to opt back in to MIIC. Records which were previously purged cannot be recovered and will require additional steps to add that immunization information to MIIC.
If you would like to change your or your child's privacy settings in MIIC, submit a MIIC Public Inquiry Form.
Notification of my or my child's record being in MIIC
Letting people know that they have a record in MIIC is an important part of MIIC outreach efforts. People are notified regarding their participation in MIIC and their right to limit participation in a number of ways:
- Parent notice of official birth record: After the birth of a baby, the new parents/guardians are given a copy of the "Parent Notice of Official Birth Record." On this form is a statement that notifies the parents/guardians of their child's automatic participation in MIIC. The statement explains that the information from the child's birth record is given to MIIC and also provides information on how to limit participation in MIIC. In the event of a home birth, the state of Minnesota gives this form to all parents/guardians.
- Clinic and healthcare locations: Healthcare facilities that use MIIC are responsible for notifying their patients about their participation in MIIC. Materials such as MIIC brochures, posters, and displays are available from MDH for use in waiting and exam rooms.