Regardless of the source, prior to creating, using, storing, transmitting or sharing Protected Health Information, one must be certain that their activities are permissible in accordance with prevailing laws, regulations, standards and institutional policy.
The Penn State Milton S. Hershey Medical Center (HMC) does not currently recognize Box as an authorized repository for creating, using, storing, transmitting or sharing Protected Health Information (PHI). This includes PHI that originates from the Penn State Milton S. Hershey Medical Center and PHI that originates from entities external to the Penn State Milton S. Hershey Medical Center.
Exceptions to the HMC corporate policy are only permissible when they are authorized in writing by the recognized HMC Information Owner and then, only when information security standards established by the HMC Department of Information Technology are properly implemented and maintained.
Questions pertaining to the access and use of Protected Health Information created or maintained by the Penn State Milton S. Hershey Medical Center should be directed to your supervisor and then, as appropriate, to the recognized HMC Information Owner via the IT Technical Support Center at 717-531-6281.