Our Commitment to Your Privacy

The Student Health Center is committed to protecting the privacy of [students and employees/students, employees, and members of the public] who use our services. Records we maintain related to all patients are protected by Tennessee state law. Because this clinic is part of University of Tennessee, the records we maintain related to patients who are enrolled students are also generally education records protected by the Family Educational Rights and Privacy Act (FERPA). 

What This Notice Covers

This Privacy Notice explains:

• How we use your information;
• Rights and protections of your information under Tennessee law;
• Rights and protections of your information under FERPA if you are a student enrolled at our campus; and,
• When we may disclose your information.

Important Note About HIPAA

Although many medical offices and hospitals are subject to HIPAA, the Student Health Center is not a HIPAA-covered entity for the records addressed in this notice. 

How We Use Your Information

Ways we may use your health information and medical records include:

• Provide clinical care, treatment, and related services;
• Coordinate care within the clinic;
• Make referrals, where appropriate;
• Maintain clinic operations and scheduling;
• Support billing or payment processes, if applicable;
• Comply with university policies and legal obligations;
• Respond to health and safety issues;
• Maintain required records; and,
• Support infection control, public health reporting, or other legally authorized activities.

Tennessee State Law Protections

Your medical records are protected by applicable Tennessee confidentiality and privacy laws. Under Tennessee law:

• You have the right to receive a copy of your medical records within ten (10) business days of submitting a written request. Tenn. Code Ann.  § 63-2-101(a)(1).   
• Medical records are deemed confidential, and may only be disclosed if the patient or their heirs have given permission or the records are compelled to be disclosed by a subpoena from a court of competent jurisdiction. Tenn. Code Ann. § 63-2-101(b)(1)(A). 
• Education records, including medical treatment and psychological treatment and testing, of students at public educational institutions are deemed confidential, and may not be disclosed without the consent of the student or if an exception applies. Tenn. Code Ann. § 10-7-504(a)(4).

FERPA Protections

Clinic records maintained by the Student Health Center for enrolled students are also covered by FERPA. If you are an enrolled student, your health information is generally protected from disclosure without your written consent, unless FERPA permits the disclosure.

Under FERPA, the university may disclose information from education records without your consent in certain circumstances, including:

• To school officials with legitimate educational interests, including third-party vendors performing a function on behalf of the Clinic, which requires that they have access to your health information;
• To another school where you seek or intend to enroll, subject to FERPA requirements;
• To comply with a lawfully issued subpoena or court order, as permitted by FERPA; and,
• In connection with a health or safety emergency.

Your Rights Under FERPA

Subject to FERPA and applicable law, if you are an enrolled student, you have the right to:

• Request to inspect and review your education records;
• Request amendment of inaccurate or misleading records;
• Provide written consent for disclosures when required; and,
• File a FERPA complaint with the U.S. Department of Education if you believe your rights have been violated.

Please note that FERPA treatment records have different access rules than other education records. 

When We May Disclose Information Under FERPA

We may disclose your information in the following circumstances:

1. With Your Written Consent

We may share your records if you sign a valid written authorization or consent form.

2. To University Officials With Legitimate Educational Interest (Enrolled Students)

We may share relevant information with clinic staff and university officials who need the information to perform their professional responsibilities, consistent with FERPA and applicable Tennessee law.

3. For Health or Safety Emergencies

We may disclose information if necessary to protect your health or safety or the health or safety of others, as permitted by FERPA and applicable Tennessee law.

4. As Required by Law

We may disclose information when required or authorized by law, including compliance with:

• Court orders or subpoenas
• Mandatory reporting obligations
• Public health reporting requirements
• Certain state or federal investigations or audits

5. For Treatment or Referral Purposes

If permitted by FERPA and applicable law, we may share medical records or information with healthcare professionals or providers involved in your care or referral.

6. To Parents or Guardians Where Permitted (Enrolled Students)

If you are a dependent student for federal tax purposes, or if another FERPA exception applies, the university may disclose information to a parent or guardian as allowed by FERPA and university policy. However, Tennessee law and the nature of the services or records involved may also affect whether disclosure is permitted.

Electronic Communications

We may use electronic communications for scheduling, follow-up, and other clinic-related matters, consistent with university policy and applicable law. If you communicate with us electronically, we encourage you to use approved university systems when possible to reduce any privacy and confidentiality risks.

Minors and Consent

If the clinic provides services to minors, privacy and consent rights may vary depending on the student’s age, status, type of service, and applicable Tennessee law. In some situations, a parent or guardian may have rights of access; in others, confidentiality may be protected by law.

Questions or Complaints

If you have questions about this Privacy Notice or how your information is handled, please contact:

Associate Director
UT Student Health Center
1800 Volunteer Blvd
865-974-3135
[email protected]

If you believe your FERPA rights have been violated, you may also contact:

Student Privacy Policy Office
U.S. Department of Education
400 Maryland Avenue, SW
Washington, DC 20202-4605
Telephone: 202.260.3887

Changes to This Notice

We may update this Privacy Notice from time to time. The current version will be posted at studenthealth.utk.edu and available upon request.

Effective Date: October 1, 2026