Southern Medical Association is in agreement with the American Medical Association's Web Guidelines regarding privacy and confidentiality. Southern Medical Association has been given permission to post the AMA Guidelines on www.sma.org. Permission granted January 22, 2002.
SMA Credit Card Policy
SMA abides by the privacy statement that is published on www.sma.org. In addition, all credit card transactions are conducted over a secure socket layer connection. Credit card information is not stored or re-used in any manner. Only authorized personnel can access credit card information solely for the purpose of performing adjustments or refunds at the customer's request. Visitors are warned never to send credit card information through regular e-mail. Please use the secured forms provided on this site to register for activities.
SMA follows the policies presented below under Privacy items 1-15. At this time SMA does not employ "cookies" see #12 and does not gather information from visitors without their expressed permission.
AMA Guidelines for Websites Regarding Privacy Issues
The following principles reflect the AMA's commitment to maintain the Web site visitor's rights to privacy and the confidentiality of personal information. In this context, privacy refers to the right of the individual site visitor to choose whether to allow personal information to be collected, by the host site (in this case, the AMA) or by third parties, and to know what type of information is collected and how that information is used. Confidentiality is the right of an individual to not have personally identifiable medical or other information disclosed to others without that individual's express informed consent.
The Internet has the potential to allow information about Web site use to be tracked in aggregate (which can help site developers understand site use and improve the experience of the viewer) and at the individual user level. Individual user information can improve the visitor's experience of the site by permitting personalization of the site related to the individual's particular interests or concerns. However, tracking of personal medical and health information (ie, medical conditions, health-seeking behaviors and questions, and requests about drug therapies or medical devices or information pertaining to them) could breach an individual's personal privacy and reveal an individual's health data.
Thus, health and medical Web sites have a particular obligation to protect the privacy and confidentiality of individuals. Patients and individuals with interest in particular medical conditions should feel confident in obtaining information and using resources on the site, without concern that such use will be identified with them without their permission. The AMA believes that all site visitors should have the opportunity to opt in or out of allowing personal information to be tracked. In addition, the AMA takes extensive measures to ensure the safety and security of its Web site servers and to guard against divulging private information. The AMA believes that Web site visitors should know who (eg, the site organization or third party) is tracking personal information and the types of personal information that are tracked and should have the right to opt out of such information being collected at any time.
Protection of patients' rights to confidentiality is fundamental to medical publishing. Health care professionals must adhere to privacy and confidentiality principles to legally and ethically share important information about medical conditions of individual patients. The sharing of such information may improve clinical care for the individual or improve the general state of knowledge about medical and health care through medical research. Medical publications, whether in print or online, must not reveal identifiable information about an individual without that person's express informed consent. These principles apply to information in medical publications (eg, JAMA) as well as less formal venues used by health care professionals, such as online discussion groups, chat rooms, and e-lists.
Privacy
- A link to the privacy policy of the Web site should be provided on the home page or the site navigational bar and should be easily accessible to the user. The Web site should adhere to the privacy principles posted.
- Individuals responsible for Web sites that post advertising should be aware of current technology and access possessed by third parties that post or link to advertisements. Web sites should ensure that the technology and access used by third parties adheres to the Web site's privacy policies.
- The site should not collect name, e-mail address, or any other personal information unless voluntarily provided by the visitor after the visitor is informed about the potential use of such information.
- The process of opting in to any functionality that includes collection of personal information should include an explicit notice that personal information will be saved, with explanation of how the information will be used and by whom. The opt-in statement should not be embedded in a lengthy document and should be explicit and clear to the viewer.
- Collection, retention, and use of nonmedical personal information about site visitors may be offered to viewers when such information would be useful in providing site visitors with products, services, and other opportunities, provided such use adheres to these principles and is within bounds of current regulations and law (http://www.ftc.gov/privacy/index.html). Individuals may agree to have such nonmedical personal information collected or may choose not to, with the understanding that opting out of having such information collected prevents the site from being tailored to their particular needs and interests. Such information will not include personal health information, such as any information about medical conditions or medications purchased.
- Names and e-mail addresses of site visitors should not be provided or released to a third party without the site visitor's express permission.
- E-mail information, personal information about specific visitor's access and navigation, and information volunteered by site visitors, such as survey information and site registration information, may be used by the site owner to improve the site but should not be shared with or sold to other organizations for commercial purposes without the site visitor's express permission.
- The AMA will use e-mail addresses voluntarily provided by site visitors to notify them about updates, products, services, activities, or upcoming events. Site visitors who do not wish to receive such notifications via e-mail should be able to opt out of receiving such information at any time.
- The AMA has licensed its physician and medical student list to third parties for more than 50 years. This information is licensed to database licensees under strict guidelines. The names and addresses of physicians in the AMA Physician Masterfile are made available only for communications that are germane to the practice of medicine or of interest to physicians or medical students as consumers. E-mail addresses are excluded from such licensing agreements.
- Nonidentifiable Web site visitor data may be collected and used in aggregate to help shape and direct the creation and maintenance of content and to determine the type of advertisement to be seen by site visitors while on the AMA site.
- The AMA will not collect and will not allow third parties to collect personal medical information (medical conditions, health-seeking behaviors and questions, and use of or requests for information about drugs, therapies, or medical devices) without the express consent of the site visitor after explanation of the potential uses of such information.
- A cookie is a small file stored on the site user's computer or Web server and is used to aid Web page navigation. Two types of cookies are commonly used. A session cookie is a temporary file created whenever a Web site is accessed and is self-terminated based either on an expiration date (eg, 3 hours from creation of the cookie) or by closing the Web browser. A persistent cookie is a permanent file and must be deleted manually. Cookies referred to in the context of these Guidelines are persistent cookies. A cookie function may be used on the site to track visitor practices to help determine which site features and services are most important and guide editorial direction. The cookie makes it possible for the user to access the site without requiring entry of a user name or password, allows the user to view different restricted areas of the site without reregistering, allows the user to personalize the site for future use, and permits the user to make subsequent purchases without reentering credit card information. Users who do not desire the functionality created by the cookie should have the option to disable the cookie function, either by indicating when asked that they do not wish to have a cookie created or by disabling the cookie function on their browser. Individuals should be able to opt out of cookie functions that permit tracking of personal information at any time.
- E-mail messages sent to a Web site may not be secure. Site visitors should be discouraged from sending confidential information by e-mail. Site visitors sending e-mail accept the risk that a third party may intercept e-mail messages.
- Market research conducted by the site or its agent to enhance the site should be clearly identified as such.
- E-mail alerts and newsletters should contain an "unsubscribe" option.