Policy header carries a 2023 effective date and an April 2026 last update
The policy header states an effective date of January 1, 2023 and a last-updated date of April 3, 2026, so the posted text presents itself as a policy in force since 2023 that was revised in April 2026. Both dates sit at the top of the document, above the introduction.
Supporting quotations
Effective Date: January 1, 2023
Last Updated: April 3, 2026
Qualifications & exceptions
Applies to the text as posted at capture.
Not stated here
What the April 3, 2026 update changed; the source contains no prior version or redline.
Legal Rights & Agreement Rules · Restriction or exception
PHI is outside Personal Information and is governed by Customer Documents and HIPAA
The policy excludes Protected Health Information from its definition of Personal Information because PHI has different treatment under HIPAA, other applicable laws and the Customer Documents. PHI is defined as individually identifiable health information protected by HIPAA and its implementing regulations, and the Customer Documents are the service agreement, business associate agreement or other Services terms eCW holds with its Provider customers. For a patient of a Provider, use and disclosure of PHI is governed by HIPAA and the Customer Documents with that Provider, not by this policy, and requests about PHI are directed to the Provider.
Supporting quotations
1.2. In this Privacy Policy, we do not include Protected Health Information in the definition of Personal Information because, as discussed in Sections 2 and 4, Protected Health Information has different treatment under HIPAA (as defined below), other applicable laws, and the Customer Documents (as defined below). Accordingly, because Protected Health Information is handled differently under the Customer Documents, if you are a patient of a Provider (as defined below), your Protected Health Information is subject to the Customer Documents and your Provider's terms of service and privacy practices.
2.1.2. "Protected Health Information" or "PHI" is individually identifiable health information that is protected by the Health Insurance Portability and Accountability Act of 1996, as amended, and its implementing regulations ("HIPAA").
(the "Customer Documents") that we have entered with our customers (health care providers or their firms, "Providers") that also govern our use of PHI
If you are a patient of a Provider, our use and disclosure of your Protected Health Information is governed by HIPAA and other applicable law and the Customer Documents with your Provider not by this Privacy Policy.
Qualifications & exceptions
The carve-out is framed as a definitional exclusion of PHI from Personal Information, backed by the governing-document allocation in Section 4.1.2.
Not stated here
The Customer Documents and the Provider’s own terms are not in the supplied source, so their substantive PHI terms are not evidenced here.
Legal Rights & Agreement Rules · Company practice
Policy is part of, and incorporated into, the Terms of Use and Terms and Conditions
eCW states the policy applies wherever it is posted and is part of, and incorporated into, the applicable Terms of Use for the Sites, Portals and other Services and any Terms and Conditions for its software and mobile applications. Visiting or using the Services, or otherwise affirming acceptance of an agreement that incorporates the policy by reference, is treated as acceptance of the described collection, use, disclosure and transfer practices, and readers who do not agree are told not to use the Services. Capitalized terms the policy leaves undefined take their meaning from those agreements.
Supporting quotations
This Privacy Policy applies wherever it is posted, and it is part of and incorporated into applicable Terms of Use Agreements ("Terms of Use") for the Sites, the Portals, and other Services, and into any applicable Terms and Conditions for our software and mobile applications ("Terms and Conditions").
By visiting or using the Services or otherwise affirming the acceptance of an agreement into which this Privacy Policy is incorporated by reference, you acknowledge and agree to accept the practices described in this Privacy Policy regarding the collection, use, disclosure, and transfer of your Personal Information.
Qualifications & exceptions
Acceptance arises by visiting or using the Services, or by affirming an agreement that incorporates the policy.
Not stated here
The Terms of Use and Terms and Conditions are not in the supplied source, so their separate obligations are not evidenced here.
Legal Rights & Agreement Rules · Restriction or exception
Policy disclaims contractual status and points to the Terms for obligations
The introduction states that the policy is not a contract and does not create contractual rights or obligations, and that use of the Services is governed by the applicable Terms of Use or Terms and Conditions. Read with the incorporation sentence, the policy supplies content for those agreements while the agreements carry the contractual obligations.
Supporting quotations
This Privacy Policy is not a contract and does not create any contractual rights or obligations. Your use of the Services is governed by the applicable Terms of Use or Terms and Conditions of the respective Services.
Qualifications & exceptions
The disclaimer appears in the policy text itself; how it interacts with incorporation into the Terms is not discussed in the source.
Legal Rights & Agreement Rules · Restriction or exception
Local law controls where rights differ; California and other-state notices apply by residence
eCW recognises that privacy rights and obligations may differ by location and says it will comply with local legal requirements where they do. California residents are referred to the Privacy Notice for California Residents in Section 18, phrased as possibly applicable, and residents of other states with applicable consumer privacy laws are referred to Section 19.
Supporting quotations
Please note that some privacy rights and obligations may differ in certain locations based on local law, in which case eCW will comply with the local legal requirements. If you are a California resident, our Privacy Notice for California Residents in Section 18 may apply to you. For residents of other states with applicable consumer privacy laws, please refer to Section 19.
Qualifications & exceptions
The California notice is described as possibly applicable ("may apply") rather than as automatically governing every California resident.
Section 19 is addressed to residents of states with applicable consumer privacy laws.
Legal Rights & Agreement Rules · Permission or license
eCW reserves the right to modify the policy at any time and posts revisions
eCW reserves the right to modify the policy at any time. Revisions that change how Personal Information is collected, used or shared are posted in the policy, and for material changes eCW may also notify readers beforehand through a site notice or a notification. Readers are told to review the policy periodically, and eCW notes the effective date of the latest version at the beginning of the policy.
Supporting quotations
eCW reserves the right, at any time, to modify this Privacy Policy. If we make revisions that change the way we collect, use, or share Personal Information, we will post those changes in this Privacy Policy. If we make material changes to our Privacy Policy, we may also notify you by other means prior to the changes taking effect, such as by posting a notice on our Site or sending you a notification. You should review this Privacy Policy periodically so that you keep up to date on our most current policies and practices. eCW will note the effective date of the latest version of our Privacy Policy at the beginning of this Privacy Policy.
Qualifications & exceptions
Advance notice of material changes is discretionary ("we may also notify you").
The introduction does not state when a posted revision becomes binding on a reader.
Not stated here
Whether continued use after a revision is treated as acceptance; the introduction does not say so.
Legal Rights & Agreement Rules · Restriction or exception
Supplemental employee notice controls over the policy in case of conflict
Employees and job applicants who are California residents, or who reside in other states that require it, receive a supplemental privacy notice covering their employment or job-application relationship with eCW. Where that supplemental notice conflicts with the policy, the supplemental employee notice controls.
Supporting quotations
1.5. Employees and job applicants who are California residents, or who reside in other states that require it, receive a supplemental privacy notice that applies to their relationship with eCW in the context of their employment or job application. In the event of any conflict with this Privacy Policy, the terms of the supplementary employee notice will control.
Qualifications & exceptions
Applies to employees and job applicants in California or in other states that require a supplemental notice.
Not stated here
The supplemental employee notice is not in the supplied source, so its terms are not evidenced here.
Legal Rights & Agreement Rules · Context
Protected Health Information means HIPAA-protected identifiable health information
For the same section the policy defines Protected Health Information as individually identifiable health information protected by HIPAA and its implementing regulations. The definition is imported by reference to HIPAA rather than spelled out element by element.
Supporting quotations
2.1.2. "Protected Health Information" or "PHI" is individually identifiable health information that is protected by the Health Insurance Portability and Accountability Act of 1996, as amended, and its implementing regulations ("HIPAA").
Qualifications & exceptions
The definition depends on the scope of HIPAA and its implementing regulations, which the policy does not reproduce.
Not stated here
Which data eCW handles as PHI depends on the HIPAA framework and the Customer Documents, neither of which is in this section.
Legal Rights & Agreement Rules · Context
Portal services and support operations involve PHI supplied under Customer Documents
The policy says certain Services provided to customers or made available to their patients, such as the Portals, and certain support operations, involve access to and processing of PHI. That PHI is provided under a service agreement, business associate agreement or other document with terms and conditions for the Services, defined as the Customer Documents, entered with customers who are health care providers or their firms, defined as Providers. The Customer Documents also govern eCW’s use of the PHI of the Provider’s patients.
Supporting quotations
Certain Services we provide to our customers or make available to their patients, such as the Portals, as well as certain support operations, involve access to, and the processing of, PHI.
This PHI is provided to us pursuant to a service agreement, business associate agreement, or other document with terms and conditions for the Services (the "Customer Documents") that we have entered with our customers (health care providers or their firms, "Providers") that also govern our use of PHI of their patients provided by our Provider customers or their patient users.
Qualifications & exceptions
The PHI described here is limited to Services and support operations that involve patient data, not every eCW product.
Not stated here
The Customer Documents are not reproduced in the source, so their specific use and disclosure terms are not evidenced.
Legal Rights & Agreement Rules · Restriction or exception
PHI requests go to the Provider, and eCW disclaims responsibility for Provider handling
Patients are told to submit all requests and questions about their PHI directly to their Provider. eCW also says it is not responsible for how its Provider customers treat PHI it collects on their behalf and recommends that patients review the Provider’s own privacy policies.
Supporting quotations
Please submit all requests and questions related to your PHI directly to your Provider. We are not responsible for how our Provider customers treat PHI we collect on their behalf, and we recommend you review their own privacy policies.
Qualifications & exceptions
Addressed to patients of a Provider.
Not stated here
The policy does not describe what a patient can obtain from eCW directly about PHI held on a Provider’s behalf.
Legal Rights & Agreement Rules · Permission or license
Information may be disclosed to comply with law and valid legal process
eCW says it may disclose information to comply with applicable laws or regulations, including valid legal processes such as a search warrant, subpoena or court order from a tribunal of competent jurisdiction.
Supporting quotations
To comply with law. We may disclose your information to comply with any applicable laws and/or regulations, such as to comply with valid legal processes such as a search warrant, subpoena, or order from a court or tribunal of competent jurisdiction.
Qualifications & exceptions
The stated triggers are applicable law and valid legal process.
Not stated here
Whether eCW notifies users of legal-process requests is not stated in this section.
Legal Rights & Agreement Rules · Permission or license
Disclosure covers legal process, charge verification and enforcing eCW’s rights
To the extent permitted by law, eCW will disclose Personal Information to government authorities or third parties under a legal request, subpoena or other legal process. It may also use or disclose Personal Information as permitted by law to perform charge verifications, to apply or enforce the Services’ Terms of Use or Terms and Conditions, and to protect its own rights, interests or property and those of its affiliates, customers or Service users.
Supporting quotations
7.1.5. Compliance with Law: To the extent permitted by law, eCW will disclose Personal Information to government authorities or third parties pursuant to a legal request, subpoena, or other legal process. eCW may also use or disclose your Personal Information as permitted by law to perform charge verifications, apply, or enforce the Service's Terms of Use or Terms and Conditions, or protect eCW's rights, interests, or property as well as those of eCW affiliates, customers, or Service users
Qualifications & exceptions
The clause is qualified by “to the extent permitted by law”.
The protections extend to affiliates’, customers’ and Service users’ rights and property, not only eCW’s.
Not stated here
Notice to the reader before a legal-process disclosure is not described in this clause.
Legal Rights & Agreement Rules · Restriction or exception
Aggregated or de-identified PHI is created or disclosed only as the Provider authorizes
Where the reader is a patient of a Provider, eCW says it may only create, use or disclose aggregated or certain de-identified PHI as authorized by the Provider in the Customer Documents. Patient data is therefore carved out of the general aggregated-information sharing described in the same section.
Supporting quotations
If you are a patient of a Provider, we may only create, use or disclose aggregated or certain de-identified PHI as authorized by your Provider in the Customer Documents.
Qualifications & exceptions
Applies only to PHI of Provider patients.
Authorization comes from the Provider through the Customer Documents, not from the patient directly.
Not stated here
The Customer Documents themselves are not reproduced.
Legal Rights & Agreement Rules · Restriction or exception
Third-party links are provided for convenience, with eCW disclaiming responsibility
eCW says its Sites may contain links to third-party websites, that it is not responsible or liable for the privacy practices or content found on those websites, and that readers should check each website’s privacy notice and policies. Links are described as provided solely for convenience, and any use of or submission of data to such websites is said to be at the reader’s sole risk.
Supporting quotations
Our Sites may contain certain links to third party websites. eCW is not responsible or liable for the privacy practices or content found on these websites. You should check the privacy notice and policies of each website you visit. Links to third party websites are provided solely for your convenience and any use or submission of data to such websites shall be at your sole risk.
Qualifications & exceptions
Disclaims responsibility and liability for third-party practices and content.
Places the risk of using linked sites on the reader.
Not stated here
Whether any linked site is operated by an eCW affiliate is not addressed here.
Legal Rights & Agreement Rules · Company practice
The policy may change at any time, effective on the last updated date
eCW may change the policy at any time, and unless it says otherwise changes take effect on the last updated date shown at the top of the policy. Readers are told to check the policy regularly, and eCW says it may try to notify material changes by posting a notice on the Services, by e-mail if an address has been provided, or by other reasonable methods. Notification of material changes is framed as something eCW may attempt rather than something it guarantees.
Supporting quotations
eCW may change this Privacy Policy at any time. Unless we say otherwise, changes will be effective upon the last updated date at the top of this Privacy Policy. Please check this Privacy Policy regularly to ensure that you are aware of any changes. We may try to notify you of material changes to this Privacy Policy, which if we do so may be by means such as by posting a notice directly on the Services, by sending an e-mail notification (if you have provided your e-mail address to us), or by other reasonable methods.
Qualifications & exceptions
Change notice is discretionary (“we may try to notify you”).
The effective date defaults to the last updated date unless eCW says otherwise.
Not stated here
What counts as a material change is not defined.
Legal Rights & Agreement Rules · Restriction or exception
Using the Services after a change is treated as acceptance of the change
The policy says that if a reader uses the Services after changes to the policy, the reader has accepted the changes, and that a reader who does not agree with the changes should stop using the Services. Acceptance is therefore tied to continued use rather than to an affirmative action.
Supporting quotations
In any event, if you use the Services after changes to this Privacy Policy, you have accepted the changes. If you do not agree with the changes, please stop using the Services.
Qualifications & exceptions
Acceptance arises from continued use.
The stated remedy for disagreement is to stop using the Services.
Not stated here
Whether a reader can reject a change while continuing to use some Services is not addressed.
Legal Rights & Agreement Rules · Context
Privacy questions and incident reports go to the Chief Privacy Officer in Westborough
Readers with questions or concerns about the policy, or who need to report a privacy incident, are directed to the eCW Chief Privacy Officer at eClinicalWorks, LLC, 2 Technology Drive, Westborough, MA 01581, marked for the attention of the Chief Privacy Officer, using the privacy-office contact given in that block.
Supporting quotations
If you have any questions or concerns related to this Privacy Policy or if you need to report a Privacy incident, please contact the eCW Chief Privacy Officer at:
The contact block in the source ends with the local part of the address, so the full e-mail address is not reproduced in the evidence.
Legal Rights & Agreement Rules · Restriction or exception
Contact addresses monitor only privacy and security matters, and Portal help goes to the Provider
The published addresses are monitored only for privacy- and security-related inquiries, and a patient with a question about accessing the Patient Portal is told to contact their healthcare provider. The limitation channels patient access questions away from the privacy and security contacts.
Supporting quotations
These e-mail addresses are monitored only for privacy- and security-related inquiries. If you are a patient and have a question related to accessing the Patient Portal, please contact your healthcare provider.
Qualifications & exceptions
The monitoring limitation applies to the privacy and security addresses.
Not stated here
Where non-privacy inquiries should be directed is not stated in this block.
Legal Rights & Agreement Rules · Context
The California notice carries its own effective and last-updated dates
The Privacy Notice for California Residents states an effective date of January 1, 2023 and a last updated date of June 6, 2025, separately from any dates stated for the main privacy policy.
Supporting quotations
Effective Date: January 1, 2023 Last Updated: June 6, 2025
Not stated here
The notice does not explain how its dates relate to the dates on the main policy.
Legal Rights & Agreement Rules · Context
The notice supplements the policy for California residents to comply with CCPA/CPRA
The notice is described as supplementing the privacy policy and applying to all visitors to the Site and others who reside in California. eCW says it adopts the notice to comply with the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020, and that terms defined in the CCPA/CPRA carry the same meaning in the notice.
Supporting quotations
This Privacy Notice for California Residents (this "Notice") supplements the information contained in this Privacy Policy and applies to all visitors to our Site, users and others who reside in the State of California ("you" or as the context requires "your"). We adopt this notice to comply with the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 ("CCPA/CPRA"), and any terms defined in the CCPA/CPRA have the same meaning when used in this Notice.
Qualifications & exceptions
Scope is limited to California residents.
Statutory terms are incorporated by reference rather than redefined.
Not stated here
The notice does not state how a conflict with the main policy would be resolved beyond describing itself as a supplement.
Legal Rights & Agreement Rules · Restriction or exception
Public, de-identified and HIPAA-covered data are excluded from the California definition
The notice excludes from CCPA/CPRA Personal Information publicly available information and lawfully obtained truthful information that is a matter of public concern, de-identified or aggregated consumer information, and information excluded from the statute’s scope, giving the example of PHI and health or medical information covered by HIPAA and the California Confidentiality of Medical Information Act, and clinical trial data.
Supporting quotations
Publicly available information or lawfully obtained, truthful information that is a matter of public concern;
De-identified or aggregated consumer information; or
Certain information excluded from the CCPA/CPRA's scope, such as PHI, health or medical information covered by HIPAA and the California Confidentiality of Medical Information Act ("CMIA") or clinical trial data.
Qualifications & exceptions
The exclusion for scope-covered information is illustrated by HIPAA, CMIA and clinical trial data.
Not stated here
Whether the exclusions match the statutory text exactly is not verifiable from the notice alone.
Legal Rights & Agreement Rules · Company practice
Legal obligations and enforcing contract rights are listed California purposes
Carrying out eCW’s legal obligations and enforcing company rights arising from contracts to which it is a party is a listed business or commercial purpose.
Supporting quotations
Carry out our legal obligations and enforce Company rights arising from any contracts to which we are a party
Legal Rights & Agreement Rules · Company practice
Protecting rights, property or safety and answering law enforcement are listed purposes
The list includes uses necessary and appropriate to protect the rights, property or safety of eCW, its customers or others, and responding to law enforcement requests as required by applicable law, court order or governmental regulations.
Supporting quotations
As necessary and appropriate to protect the rights, property or safety of eCW, our customers or others
Respond to law enforcement requests as required by applicable law, court order, or governmental regulations
Qualifications & exceptions
The safety purpose extends to customers and third parties, not only eCW.
The law-enforcement purpose is conditioned on what the law, a court order or regulations require.
Legal Rights & Agreement Rules · Company practice
Verifying consumer privacy rights requests is a listed California purpose
Verifying certain consumer privacy rights requests appears as a business or commercial purpose, tying use of the information to the request-verification step of the rights process.
Supporting quotations
Verify certain consumer privacy rights requests
Legal Rights & Agreement Rules · Context
Consumer rights are introduced as rights California residents may have
The rights section opens by saying California residents may have certain consumer rights and that these rights may include the list that follows. The framing is conditional rather than an unqualified grant.
Supporting quotations
California residents may have certain consumer rights. These rights may include:
Qualifications & exceptions
Both the existence and the content of the rights are hedged with “may”.
Not stated here
The notice does not state what determines whether a given right applies.
Legal Rights & Agreement Rules · Permission or license
The right to know covers category information and a copy of collected data
The right to know is described as the right to request information about the categories of CCPA/CPRA Personal Information collected, together with information such as the categories of sources and the third parties with whom it is shared, and separately as the right to request a copy of the specific pieces of CCPA/CPRA Personal Information collected, sometimes called the right to access personal information.
Supporting quotations
The right to know what CCPA/CPRA Personal Information we collect, including (1) the right to request information regarding the categories of CCPA/CPRA Personal Information we collect along with other information such as the categories of sources from which the information is collected and third parties with whom it is shared and (2) the right to request a copy of the specific pieces of CCPA/CPRA Personal Information we collect (sometimes referred to as the right to access personal information);
Qualifications & exceptions
Two components are described: category-level information and specific pieces.
Access is described as the right to a copy of what was collected.
Legal Rights & Agreement Rules · Permission or license
The right to delete is subject to stated exceptions
The right to delete CCPA/CPRA Personal Information collected from the reader is qualified by “subject to certain exceptions” in the list entry. The exceptions themselves are not enumerated in this list entry.
Supporting quotations
The right to delete CCPA/CPRA Personal Information that we collect from you, subject to certain exceptions;
Qualifications & exceptions
The right is expressly subject to exceptions.
Not stated here
The list entry does not identify the exceptions; later paragraphs describe limits on deletion.
Legal Rights & Agreement Rules · Permission or license
The right to correct covers inaccurate information eCW maintains
The right to correct inaccurate CCPA/CPRA Personal Information that eCW maintains about the reader appears as a list entry without further conditions.
Supporting quotations
The right to correct inaccurate CCPA/CPRA Personal Information that we maintain about you;
Legal Rights & Agreement Rules · Permission or license
The list includes a right not to be retaliated against for exercising rights
The final list entry is the right not to be retaliated or discriminated against for exercising any CCPA/CPRA rights in good faith.
Supporting quotations
The right not to be retaliated or discriminated against for exercising any CCPA/CPRA rights in good faith.
Qualifications & exceptions
Exercising rights in good faith is stated as the condition.
Legal Rights & Agreement Rules · Company commitment
eCW promises no discrimination but may vary price with the value of the data
eCW says it will not discriminate against a reader for exercising the listed rights, giving charging a different price or denying goods or services as examples, but that it may charge a different price or rate or provide a different level or quality of goods or services where the difference is reasonably related to the value provided to eCW by the data.
Supporting quotations
eCW will not discriminate against you for exercising any of the abovementioned rights, for example, by charging a different price or denying goods or services. However, eCW may charge a different price or rate or provide a different level or quality of goods or services when that difference is reasonably related to the value provided to us by the data
Qualifications & exceptions
The non-discrimination statement is followed by an express carve-out for value-related differences.
Price, rate, level and quality are all named as things that may differ.
Not stated here
The notice does not quantify the value of the data or describe how a permitted difference would be calculated.
Legal Rights & Agreement Rules · Permission or license
The sensitive-information limit applies to inference uses and permits statutory uses
The right to limit the use or disclosure of CCPA/CPRA Sensitive Personal Information is stated for situations where the information is used to infer characteristics about the reader, and is exercised through the “Your Privacy Choices” section. eCW adds that it may continue using Sensitive Personal Information for certain purposes expressly permitted by the CCPA/CPRA.
Supporting quotations
You also have the right to limit the use or disclosure of your CCPA/CPRA Sensitive Personal Information if used to infer characteristics about you. To exercise this right, please visit the "Your Privacy Choices" section of our website. eCW may continue using Sensitive Personal Information for certain purposes expressly permitted by the CCPA/CPRA.
Qualifications & exceptions
The limit is tied to inference uses.
Expressly permitted uses continue after a limit request.
Not stated here
The permitted purposes are not enumerated in this paragraph.
Legal Rights & Agreement Rules · Company practice
Requests go through a state privacy request form or a toll-free number
A reader wishing to exercise the listed rights is directed to complete the State Consumer Privacy Rights Request Form, linked to a request.eclinicalworks.com address, or to call the toll-free number given, +1 (866) 888-6929.
Two channels are offered: an online form and a toll-free telephone number.
Not stated here
The linked State Consumer Privacy Rights Request Form is a separate document whose text this source does not supply, so this card cannot describe its fields or requirements.
Legal Rights & Agreement Rules · Company practice
Requests require identity matching with extra proof for sensitive data and agents
The notice requires a valid means of identification as a security precaution, and says eCW will verify identity with a reasonably high degree of certainty where feasible by matching the identifying information supplied against the CCPA/CPRA Personal Information it maintains or by using a third-party identity verification service. Extra information collected for verification is to be used only for that purpose and deleted as soon as practicable after complying with the request, additional proof may be required for particularly sensitive information, and a request made through an authorised agent requires written proof that the agent is authorised.
Supporting quotations
If you make a request related to CCPA/CPRA Personal Information about you, you will be required to supply a valid means of identification as a security precaution. We will verify your identity with a reasonably high degree of certainty using the following procedure where feasible: we will match identifying information you provide when making the request to the CCPA/CPRA Personal Information maintained by eCW or use a third-party identity verification service. If it is necessary to collect additional information, eCW will use the information only for verification purposes and will delete it as soon as practicable after complying the request. For requests related to particularly sensitive information, we may require additional proof of identification. If you make a Consumer Rights request through an authorized agent, we will require written proof from you that the agent is authorized to act on your behalf.
Qualifications & exceptions
Verification uses matching or a third-party service.
Additional proof is discretionary for particularly sensitive information.
Agent requests require written proof of authority.
Not stated here
The notice does not state what “reasonably high degree of certainty” means in practice.
Legal Rights & Agreement Rules · Restriction or exception
eCW reserves its legal rights and calls the described rights non-absolute
The notice says eCW will review requests and respond accordingly, that the rights described are not absolute and that eCW reserves all rights available to it at law in this regard. It also says it will process a request within the time provided by applicable law.
Supporting quotations
We will review your requests and respond accordingly. The rights described herein are not absolute and we reserve all our rights available to us at law in this regard.
Qualifications & exceptions
The reservation of legal rights is stated alongside the commitment to respond.
Not stated here
The notice does not say which rights might be withheld or on what basis beyond the statutory exceptions.
Legal Rights & Agreement Rules · Company practice
Where eCW acts as a service provider, requests are referred to its customer
For a California resident whose personal information eCW processed as a service provider on behalf of a customer, the notice directs the resident to inquire with that customer. If the resident requests directly from eCW, the resident must name the customer on whose behalf the information was processed, and eCW says it will refer the request to that customer and support it to the extent required by California privacy law.
Supporting quotations
If you are a California resident and we, as a service provider, have processed personal information about you on behalf of our customers and you wish to exercise your CCPA/CPRA rights, please inquire with our customer directly. If you wish to make your request directly to us, please provide the name of our customer on whose behalf we processed your personal information. We will refer your request to that customer and will support them to the extent required by California privacy law in responding to your request.
Qualifications & exceptions
The referral route applies only where eCW acted as a service provider.
Support for the customer is limited to what California privacy law requires.
Not stated here
The notice does not say how a resident identifies which customer is responsible.
Legal Rights & Agreement Rules · Company practice
Alternative-format copies of both notices are available on request
Both the California notice and the other-state privacy rights section offer an alternative format to readers with a disability, by contacting eCW with a stated phrase in the subject line: “Alternative Format California Privacy Notice” for the California notice and “Alternative Format State Privacy Notice” for the other-state notice.
Supporting quotations
If you have a disability and would like to access this Notice in a different format, you may contact us at privacy-office with the phrase "Alternative Format California Privacy Notice" in the subject line.
If you have a disability and would like to access this information in a different format, you may contact us at privacy-office with the phrase "Alternative Format State Privacy Notice" in the subject line.
Qualifications & exceptions
Two different subject-line phrases are given, one per notice.
Not stated here
The contact address is rendered incompletely as “privacy-office” in this source, so the full address cannot be stated.
Legal Rights & Agreement Rules · Company commitment
The California notice is governed exclusively by California law
The California notice is stated to be subject exclusively to the laws of the State of California, and eCW makes no representation that the notice and its practices comply with the laws of any other country.
Supporting quotations
This Notice will be subject exclusively to the laws of the State of California within the United States of America. We make no representation that this Notice and such practices comply with the laws of any other country.
Qualifications & exceptions
Governing law is California exclusively.
No claim of compliance outside the United States.
Legal Rights & Agreement Rules · Permission or license
Residents of other states may have eight listed privacy rights
The other-state section says residents of states with consumer privacy protection laws may have certain rights, listing access, correction, deletion, opting out of the sale or sharing of personal information, opting out of processing for targeted marketing or automated decision-making and profiling, receiving a copy of personal information, obtaining a list of the categories of third parties to which personal information has been disclosed, and confirming whether eCW processes the personal information.
Supporting quotations
If you are a resident in a state with consumer privacy protection laws you may have certain rights regarding your information. Those rights may include (i) access rights to your personal information, (ii) correction requests to your personal information, (iii) deletion requests, (iv) opting out of the sale or sharing of your personal information, (v) opting out of processing personal information for targeted marketing or automated decision-making/profiling, (vi) receiving a copy of your personal information, (vii) obtaining a list of the categories of third parties to which we have disclosed your personal information, or (viii) confirming whether we process your personal information.
Qualifications & exceptions
The rights are introduced with “may have” and described as rights that “may include” the list.
The list itself is not tied to any named state.
Not stated here
The section does not state which states are covered or which right applies in each.
Legal Rights & Agreement Rules · Company practice
Other-state requests use the Your Privacy Choices form and may require verification
Residents of those states are directed to the “Your Privacy Choices” link, which points to a request.eclinicalworks.com form, to submit their request. eCW may require additional information to verify identity, will consider all requests and respond within the period required by applicable law, and says that where a request is denied the reader may have a right to appeal by using the same link or contacting the privacy office.
Supporting quotations
Residents of these states may exercise the above rights by navigating to Your Privacy Choices and submitting your request on the form found at that address. We may require you to provide additional information to allow us to verify your identity in order to complete your request. We will consider all requests and provide our response within the time period required by applicable law. Please note, in many cases we are acting as a "Business Associate" and may be exempt from certain laws, or certain information we retain may be exempt from such requests.?In the event your request is denied, you may have the right to appeal the decision. You may seek to appeal by contacting us through the link set forth above or reaching out to privacy-office.
Qualifications & exceptions
Verification information may be requested.
The response deadline is the period required by applicable law.
Not stated here
The notice does not describe the appeal process or its timing beyond the contact route.
The linked request form at request.eclinicalworks.com is a separate document whose text this source does not supply, so this card cannot describe its fields or requirements.
Legal Rights & Agreement Rules · Restriction or exception
eCW says it may be exempt where it acts as a business associate
The other-state section adds that in many cases eCW is acting as a “Business Associate” and may be exempt from certain laws, and that certain information it retains may be exempt from such requests. The exemption statement sits immediately after the response-time commitment and before the appeal sentence.
Supporting quotations
Please note, in many cases we are acting as a "Business Associate" and may be exempt from certain laws, or certain information we retain may be exempt from such requests.
Qualifications & exceptions
The exemption is stated as a possibility (“may”) rather than a rule.
Both eCW and the retained information are described as possibly exempt.
Not stated here
The notice does not specify which laws or information the exemption covers, and the sentence is followed by a stray character where a space or sentence break appears in the source.