Health Data

OSU facilitates students' academic and personal success through the gathering of relevant data. Individual offices and departments oversee initial data collection and storage, following applicable laws and policies. This information is not exhaustive but is meant to illustrate what is typical on campus. This section may be updated as needed without notification. If there is a term that you do not know, check our Data Dictionary.

	What Purpose Does the Data Serve
	Provide and facilitate appropriate care Ensure compliance with campus/state vaccination requirements Add and remove UHS enrollment holds

	What Data Do We Collect
	Personally Identifiable Information (PII) and Electronic Protected Health Information (ePHI) Personal Medical Information Vaccine Records Insurance Information Appointment Information Prescription Information

	How We Collect Data
	Student Inititated Provided directly by student or on behalf of student Staff Initiated Generated by operational procedures Third-Party Initiated Provided by healthcare provider or insurance company

How We Collect Data

Student Inititated

Provided directly by student or on behalf of student

Staff Initiated

Generated by operational procedures

Third-Party Initiated

Provided by healthcare provider or insurance company

	Where We Share Data
	Sharing health data is extremely limited to the data required to fulfill position responsibilities by state and federal regulations, including HIPAA. Within the OSU campus, individual data is not shared with any other department, including Institutional Research and Analytics. Anonymized, aggregated data may be shared with administrators with oversight responsibilities. Individual data may be shared with insurance companies, other healthcare providers, pharmacies, or others, through processes allowed by HIPAA and student consent. Some information may be shared with emergency contacts in the case of life-threatening circumstances.

Where We Share Data

Sharing health data is extremely limited to the data required to fulfill position responsibilities by state and federal regulations, including HIPAA.

Within the OSU campus, individual data is not shared with any other department, including Institutional Research and Analytics.
Anonymized, aggregated data may be shared with administrators with oversight responsibilities.
Individual data may be shared with insurance companies, other healthcare providers, pharmacies, or others, through processes allowed by HIPAA and student consent.
Some information may be shared with emergency contacts in the case of life-threatening circumstances.

	When We Retire Your Data
	Follow state retention guidelines and federal regulations to retain data no less than ten years