- Summary of Data Practices
- What information Allscripts Collects
- How Allscripts Uses Your Information
- How the Information is Shared with Third Parties
- Choices You Have About How Allscripts Uses Your Information
- How Allscripts Protects Your Information
- How We Provide Required Notices of Security Breaches
A. Summary of Data Practices
|Do we release your user data for the for the following purposes?||User Data||Aggregate Data|
|Marketing and advertising||No||No|
|Reporting about our company and our customer activity||No||Yes|
|For developing software applications||No||Yes|
|Do we require limiting agreements that restrict what third-party service providers can do with your personal information?||Yes||Yes|
|Do we stop releasing your personal information via the service if you terminate your use of the service?||Yes||Yes|
|Do we have security measures that are reasonable and appropriate to protect user data, in any form, from unauthorized access, disclosure or use?||Yes||Yes|
|Do we store user data in the jurisdiction in which the provider is located?||Yes||Yes|
Aggregate Data is Personal Information that is: (1) grouped so it does not connect to you as an individual and (2) has names and other identifiers removed or altered. In other words, Aggregate Data is de-identified data and cannot be used to identify you as an individual.
When you sign up for the Service, you provide information about you. This information makes up User Data. Any information in the Service is considered User Data. User Data might include but is not limited to the following: Your name and contact information, such as your address, phone number, or email address o User account information, such as username and password.
As described further below, Allscripts may use your User Data to achieve the following:
- Operate and manage the Service
- Maintain and protect its computer systems
- Comply with the law, such as responding to subpoenas and search warrants
User Data includes Personal Information and Aggregate Data.
Personal Information means information about you that reasonably can be linked to you such as your name, user name/password, and other identifiers.
A healthcare provider, healthcare practice, or hospital with whom Allscripts licenses its electronic health record software, products, or solution.
Allscripts and our Service Providers might report about business activities and customers (you) to others, such as investors, auditors, potential business partners, or public communities. Reports will not include Personal Information without your specific permission or as permitted or required by law.
A Service Provider is an entity that is hired to perform certain functions for Allscripts to support the development, maintenance, and implementation of the Service. Service Providers may include software or website designers and data storage providers.
Security measures can include computer safeguards, secured files, and employee security training. In addition, Allscripts may be required by law to notify you and/or regulatory authorities about particular data breaches.
C. What Information Allscripts Collects
- Before you register for the Service, Allscripts may collect your information in two ways:
- If you contact Allscripts through the Internet and provide Allscripts with your contact information (e.g., name, mailing address, email address and other information);
- Allscripts may obtain your contact information from a Provider. In either case, Allscripts will use such information for the sole purpose of informing you about the Service and inviting you to register for the Service.
- In general, Allscripts collects all information that you supply directly to the Service. Allscripts also may collect information from a Provider. By using the Service, you also authorize Allscripts to collect information regarding you from the Provider. Further, Allscripts may collect information from Service Providers for the purpose of facilitating your use of the Service.
- Allscripts passively collects information from you as you navigate through our Service. Allscripts may track IP addresses, use industry standard tracking devices (e.g., session and persistent cookies, flash cookies, web beacons), and electronically gather information about the technology you use to access the Service and the areas of the Service you utilize. Allscripts passively collects this information for operational purposes such as evaluating, updating and improving the Service.
- Allscripts may collect information from your mobile device’s camera or microphone for purposes of providing the Service.
D. How Allscripts Uses Your Information
- Allscripts uses your information to provide the Service as described in the Allscripts End User App Agreement, as well as to enhance the performance of the Service and/or create new services. Allscripts will not use Personal Information for product development or product enhancement without your express, written permission.
- Once you successfully register to use the Service, Allscripts may use your information to facilitate the exchange of information and communication between you and the Provider.
E. Sharing Your Information With Third Parties
Allscripts may make your Personal Information available to third parties participating in the Service. Additionally, Allscripts may make your information available to third parties pursuant to your written authorization.
Allscripts may disclose your Personal Information to Allscripts' Service Providers that provide technical support or other services to Allscripts related to the Service. All such Service Providers are subject to confidentiality obligations and may only access and utilize your data for purposes of fulfilling their obligations to Allscripts.
F. Choices You Have About How Allscripts Uses Your Information
Managing Your Account. Generally, use of the Service requires use of your Personal Information. If you do not want to share your Personal Information, do not access or use any part of the Service. the Personal Information you provide to Allscripts for use:
Terminating Your Account. You may terminate your Professional EHR Mobile account at any time by utilizing the account management tool of the Service. Allscripts will not maintain any Personal Information upon termination of such account except as permitted or required by Your organizations contract with Allscripts or as permitted or required by law. Please note that copies of your Personal Information may remain in your Providers' or other third-parties' records.
G. How Allscripts Protects Your Information
Allscripts uses physical, technical, and administrative Security Measures to maintain the confidentiality, integrity, availability, and security of information related to the Service. Additionally, Allscripts encrypts all Personal Information during transmission between the Provider and the Service.
The safety and security of your Personal Information also depends on you. You are solely responsible for deciding to disclose or transmit Personal Information through your use of the Service to any external third party. You should never share your password with anyone else. Notify Allscripts promptly if you believe your password has been breached.
H. Security Breach Notification Requirements
Pursuant to applicable law, Allscripts may be required to send you notice of security breaches or suspected security breaches that impact your Personal Information.
By using this software, the end-user agrees not to access or use any and all content replication functionality provided by the operating system, including but not limited to taking screenshots and using the system clipboard (i.e. copy-paste functionality), to extract sensitive information (e.g. Protected/Personal Health Information (“PHI”) or Personal Data/Personal Information) from the software. Please note that the operating system clipboard may be accessible from other non-HIPAA and/or non-regulatory (including, but not limited to, GDPR) compliant software on the device or enable data to be uploaded to the user’s cloud storage for access from other devices. The user acknowledges and agrees that any content selected and copied could inadvertently disclose PHI, Personal Data, and/or Personal Information, and assumes all responsibility for doing so. Allscripts shall have no responsibility or liability for any direct, indirect, consequential, punitive, or other damages arising from any use or mis-use of the any and all content replication functionality provided by the operating system.
K. More information
If you have additional questions, please contact Allscripts any time. Or write to the company at:
Privacy Matters c/o Allscripts Healthcare, LLC
222 Merchandise Mart Plaza
Chicago, IL 60654 (USA)
Or email: privacy (at) allscripts (dot) com
Date last modified: June 9, 2021