The Surescripts network employs standards that protect privacy and confidentiality. As a Business Associate, we transmit personal health information in accordance with applicable federal and state laws and the privacy and security requirements in our contractual agreements.
Notices and policies
- Surescripts Privacy Notice
- California Applicant Privacy Notice/Your Privacy Rights
- Health Information Exchange (HIE) Privacy Policy
- HIE Frequently Asked Questions
Opt out
Patients can choose to opt out of certain uses of their information through the Surescripts network. If a patient opts out, their health information will no longer be shared through Surescripts and may affect their healthcare providers’ ability to obtain their health information. Patients will need to maintain their own records and medication history list. When a patient opts out, Surescripts honors that choice and continues to protect information in accordance with applicable laws and privacy standards.
Find out more about opting out of Surescripts services
What can I opt out of?
Patients can opt-out of the following Surescripts services:
- Medication History for Ambulatory
- Medication History for Populations
- Medication History for Reconciliation
- Record Locator and Exchange
- Surescripts Health Information Network Interconnect
How do I opt out?
If you would like to opt out, please complete and have notarized the Surescripts Request and Authorization Form. Return the form and any applicable supporting documentation to Surescripts’ Support at 2550 South Clark Street, Suite 1000, Arlington, VA 22202. Once the opt out has been processed, we will follow up with confirmation within 10 business days.
Why do I need to provide a notarized form?
Surescripts does not have direct relationships or interactions with patients. We require completion of this document to verify your identity and authority and appropriately locate and identify you within our system.
Why does Surescripts have my information?
Surescripts operates a Health Information Network where Network Participants participate for e-prescribing and related services that facilitate e-prescribing, like Medication History, Record Locator and Exchange, and Interconnect.
Who has access to my information through Surescripts?
Healthcare providers, pharmacies, pharmacy benefit managers and other organizations that use Surescripts services agree to only use and share your information as permitted by federal and state laws, including HIPAA.
What if there is a data breach involving my health information?
You will be notified if there is a breach of your information or if your information is accessed by someone without authorization.
What is medication history?
Surescripts Medication History equips healthcare providers who care for patients with access to a patient's medication history across providers, as part of the medication reconciliation process at the point of care.
What happens when I opt out?
If a patient opts out, their health information will no longer be shared through Surescripts and may affect their healthcare providers’ ability to obtain their health information. Patients will need to maintain their own records and medication history list.
Opting out renders your information undiscoverable to future requests through the Surescripts network. Opting out will not remove the information that must be retained for audit and record retention purposes or that was already provided in response to previous requests.
Can my doctor still e-prescribe if I opt out?
Yes. After opting out, providers will continue to be able to electronically send prescriptions on your behalf. It is not possible to opt out of E-Prescribing through Surescripts – this must be done through your provider.
Can I opt back in?
Yes. If you would like to opt back in, please contact optout@surescripts.com.
How is consent managed?
Specific questions regarding consent or HIPAA authorizations should be directed to your Covered Entities (healthcare provider, health plan, pharmacy, etc.)
How do I obtain a copy of my medical information?
Surescripts is not a Covered Entity of any type under HIPAA and does not maintain designated patient records.
Therefore, Surescripts is unable to provide copies of medical information. Please refer to your Covered Entities (healthcare provider, health plan, pharmacy, etc.) for copies of medical information.
Contact us
If you have any questions regarding this Privacy Notice or would like to exercise your rights, please contact us at:
Surescripts, LLC
2550 S Clark Street
Arlington, Virginia 22202
Dean Riggott Photography
Surescripts