Confidentiality of Records
201.1 CONFIDENTIALITY
To insure confidentiality, uniformity, and accuracy of personnel information, it is the responsibility of Human Resources to handle all inquiries, other than subpoenas, which require reference to documentary records concerning past and present staff of the University. Responses to the subpoenas are handled by the Office of the General Counsel. Inquiries received by other offices should be referred to Human Resources. All subpoenas and inquiries from lawyers should be referred to the Office of the General Counsel, pursuant to Policy 203.
Personnel records, including those established in connection with the selection process, are University property and are afforded confidential treatment at all times.
Individually identifiable personal information contained in computerized databases, whether maintained centrally or by schools, departments or other units, is afforded the same confidential treatment that applies to written records.
The Provost (or designee) shall administer this policy with respect to the records of faculty members. The Vice President for Human Resources (or designee) shall administer the policy with respect to the records of staff members. Deans and Directors shall notify the Provost or the Vice President for Human Resources, as appropriate, of the name of the individual who shall serve as custodian for personnel records maintained in their areas of responsibility and who shall implement this policy as to those records.
Exceptions
This policy does not cover disclosures of information which are made on the basis of personal knowledge or recollection.
This policy does not apply to applicants for employment unless they are subsequently hired.
201.2 ACCESS TO RECORDS
The individuals listed below have the right of access to their records as described in this policy:
- Both active and retired members of the faculty and staff,
- Individuals who are on leave of absence,
- Individuals whose employment has been terminated for reasons other than retirement and who have reemployment rights,
- Legal representatives of deceased faculty and staff have the right of access for five years after the death of the individual.
Exceptions to the above may be granted by the Provost or the Vice President for Human Resources.
201.3 REVIEW OF RECORDS
An individual may review his or her records by making an appointment with Human Resources during regular business hours. Human Resources will assure that references to others which may be contained in the file are deleted for the purpose of the review. For exceptions refer to Section 201.5 Limitations on Review of Records.
The review will take place in the office where the records are maintained and in the presence of a designated Human Resources staff member.
The individual will sign a log indicating the date of the inspection of the records.
If necessary, an individual may request copies of his/her records. There is no charge for copies of records referred to in the Occupational Health and Safety Act (OSHA) standards for access to medical records; for other records a reasonable charge may be made for reproduction costs.
201.4 CORRECTION OF RECORDS
If an individual considers a record is misleading, contains a statement of fact which can be shown to be erroneous, or contains information which is not relevant, a correction may be requested.
The request must be submitted in writing to Human Resources.
A request for correction of information such as date of birth must be accompanied by supporting documentation, for example, birth certificate or passport.
The designated custodian of the records may consult the Provost (or designee) or the Vice President for Human Resources (or designee), as appropriate. On the basis of this consultation, the custodian either makes the correction or indicates the reason why the request is denied.
If a correction is sought on an appropriate ground but is denied, the individual involved may submit for inclusion in the file a short statement explaining the grounds for the request and the correction sought. The Provost or the Vice President for Human Resources may submit a counterstatement, a copy of which is sent to the affected individual. Both statement and counterstatement shall be placed in the Personnel Record.
201.5 LIMITATIONS ON REVIEW OF RECORDS
To protect against inappropriate disclosure of confidential information, certain records including those containing confidential information about more than one individual and medical records are not open to review by an individual who is a subject of the record. These records are maintained separately from other benefit records and may be available under separate policies or practices applicable to all recipients of care at the Hospital of the University of Pennsylvania or elsewhere at the University.
Individuals may not review the following:
- Records which contain confidential information about other people;
- All letters of recommendation relating to the consideration of a faculty member or a staff member for appointment, re-appointment, promotion or tenure unless released by written consent of the author;
- Documents including records concerning benefits which are being developed or prepared for use in civil, criminal or grievance procedures;
- Records relating to the investigation of a possible criminal offense;
- Medical and hospital records.
201.6 RECORDS WHICH MAY BE DISCLOSED TO THIRD PARTIES
Information contained in personnel records may be disclosed by the University without the written consent of the subject of the record when the Provost or Vice President for Human Resources concludes that a constructive purpose would be served or when required by law in the judgment of the Office of the General Counsel.
Unless specifically excepted in this policy, the content of personnel records may not be disclosed to third parties without the express written permission of the individual who is the subject of the record. The written permission must describe specifically the records to be disclosed and the persons to whom they are to be disclosed.
Except for disclosures of directory information and as required by law, the University shall notify any third party to whom disclosures are made that disclosures are made under the condition that the party shall not make any re-disclosure of the information without the written consent of the subject of the record.
Information on the procedure, forms and circumstances specified below may be disclosed to third parties.
Penn makes certain directory information available to its staff, faculty, and students -- and a more limited set of information available to the general public -- so that the ordinary University business can be conducted. In some cases, individuals may "opt-out" of having certain data appear. In other cases involving more personal information, such as home contact information, individuals may "opt-in" to having their data appear. Also, individuals can often list organizational contact information, rather than personal contact information, in their directory entries. For more information on the levels of control individuals can exercise over their directory information in disclosures to Penn's faculty, staff and students and to the general public, see the Directory Information Privacy Grid.
Authorized Individuals: Personnel records may be disclosed to University officials, and authorized individuals performing work for the University who require the information for the performance of their duties.
Legal Requirements: The University may release personnel records in response to a lawful subpoena, warrant, or court order or if, in the opinion of the Office of the General Counsel, such records could be required by law to be produced for any reason, including disclosure to a government agency. Whenever possible, notice of disclosure shall be given in advance through the Almanac for general categories of personnel records or by mail for individual records.
Protection of University Interests: The University may disclose information contained in records to protect its legal interest when it believes the actions of an individual violate or have violated his/her conditions of employment or threaten injury to people or property.
Collective Bargaining Agreements: Information may be disclosed as required under the terms of a collective bargaining agreement.
Emergencies: Information may be disclosed if, in the judgment of the designated custodian of personnel records, such disclosure is necessary to protect the health, safety or property of any person.
201.7 EXEMPTIONS TO THIRD PARTY DISCLOSURE POLICY
The Office of Affirmative Action, Human Resources and Office of the General Counsel are exempted from Section 201.6 of this policy.
201.8 RECORD RETENTION REQUIREMENTS
Records shall be maintained for the period specified by state or federal law, or longer at the direction of the Provost, the Vice President for Human Resources, the University Archivist or the General Counsel.
Records will be retained according to the University's Records Retention Schedule available at www.archives.upenn.edu.
The Department of Public Safety and the Hospital of the University of Pennsylvania shall develop their own record retention policies for security records and medical records.
Faculty grievance records are retained permanently.
Policy Number: 201
Effective Date: 03/29/2005
Revised Date: 03/21/2019
Last Reviewed: 07/01/2019
Supersedes Policy Number(s): 101, 201 (09/01/1991)
Applicability: All University Employees
Cross-reference: Adherence to
University Policy - Policy 001