DATA PRIVACY & SECURITY NOTICE

 

NAMI Chicago is committed to establishing and maintaining the highest data protection standards and has adopted a privacy policy to govern the treatment of the personal information of our patients, participants, employees, and other individuals who we serve. The loss of personal information can result in substantial harm to individuals, including embarrassment, inconvenience, and fraudulent use of the information. Protecting the confidentiality and integrity of any personal information shared with us is a critical responsibility that must be taken seriously at all times.

LEGAL AND CONTRACTUAL OBLIGATIONS

NAMI Chicago is committed to complying with all legal, regulatory and contractual obligations regarding the protection and confidentiality of personal information, including requirements pertaining to sensitive or highly confidential information.

Notice and Collection

To the extent required by applicable law, when NAMI Chicago collects personal information, it will inform the individual of how it will use, process, disclose, protect, and retain that information. Personnel may only collect personal information in compliance with applicable policies, notices, and individual consent, and the information collected must be limited to that which is reasonably necessary to accomplish NAMI Chicago’s legitimate business purposes or as necessary to comply with law.

Access and Use of Personal Information

NAMI Chicago personnel may only access personal information when the information relates to and is necessary to perform their job duties. In other words, on a “need-to-know basis.” Personnel may not access personal information for any reason unrelated to their job duties. In addition, they may not use personal Information in a way that is incompatible with any notice that was given to the individual who is the subject of the information, including notices given to patients, participants, customers, and employees.

Right to Not Provide Information

NAMI Chicago does not require the disclosure of personal information to participate in our helpline or 988 programs. People who contact us have the right to share as much or as little information as they feel comfortable sharing. While some information like location or insurance may help us better assist an individual, we will do the best we can with whatever information is provided.

Sharing of Personal Information with Third Parties

Personnel may only share personal information with another employee, agent, or representative if the recipient has a job-related need to know the information.

Personal information may only be shared with third parties in accordance with contractual and legal requirements. We require that third parties provide reasonable assurances that they will maintain the confidentiality and security of personal information that is provided by NAMI Chicago. NAMI Chicago does not permit the sale of personal information under any circumstances.

Personal Information may be shared as required to meet mandatory reporting obligations and in certain other situations when disclosure is required to prevent a threat to the health and safety of an individual or the public.

Individual Rights

Individuals have rights when it comes to how their personal information is handled. These rights may vary depending on the type of information and applicable jurisdiction, but may include for example:

  • The right to consent to how personal information may be used or disclosed.

  • The right to know what personal information NAMI Chicago maintains about the individual and/or with whom NAMI Chicago shared the information;

  • The right to access the personal information; or

  • The right to request corrections to or deletion of the personal information.

Any individual seeking to access their information can send their request to privacy@namichicago.org and a response will be sent within 10 business days.

Reporting an Incident

Should anyone have knowledge of a security incident that occurred or suspects that one occurred, they should report it to the privacy officer immediately via privacy@namichicago.org.

Monitoring Compliance & Enforcement

The Privacy Officer is responsible for administering and overseeing implementation of our privacy policy and, as applicable, developing related operating procedures, processes, policies, notices, and guidelines.

Employees and others who violate this policy and any related guidelines, operating procedures, or processes designed to protect personal information and implement this policy may be subject to discipline, including termination of employment or affiliation with NAMI Chicago. No employee will be disciplined solely for bringing, in good faith, evidence regarding violations of this policy.

Questions or other matters related to our policy can be directed to our Privacy Officer at privacy@namichicago.org.