HMIS Privacy Policy

Community Information Sharing System (CISS/HMIS)

Full Privacy and Security Notice

A written copy of this Policy is available to all who request it.

It is also available here (pdf)



This notice describes the privacy policy of this agency.  The policy may be amended at any time.  We may use or disclose your information to provide you with services, and to comply with legal and other obligations.  We assume that, by requesting services from our agency, you agree to allow us to collect information and to use or disclose it as described in this notice and as otherwise required by law.


The Homeless Management Information System (HMIS) was developed to meet a data collection requirement made by the United States Congress and the Department of Housing and Urban Development (HUD). We collect statistical information on those who use our services and report this information to a central data collection system. The MO-503 Continuum of Care’s HMIS is referred to as CaseWorthy.


In addition, our Community uses the HMIS to keep computerized case records.  This information may be provided to other Community partner agencies. The information you agree to allow us to collect and share includes: basic identifying demographic data such as name, address, phone number and birth date; the nature of your situation, assessment information, and the services and referrals you receive from this agency.  This information is known as your Protected Personal Information or PPI.  All agencies use CaseWorthy to share their data with other community partner agencies, with the exception of Protected Service Providers.  These protected agencies serve specific client populations, such as domestic abuse, sexual abuse, HIV/AIDS, alcohol and/or substance abuse, and mental health, and do not share client information about those issues.


GENERALLY, all personal information we maintain is covered by this policy.  Generally, your personal information will only be used by this agency and other agencies to which you are referred for services.


Information shared with other agencies helps us to better serve you and to coordinate your services. It also helps us better understand the number of individuals who need services from more than one agency. This helps us develop new and more efficient programs.  Sharing information can also help us to make referrals more easily and may reduce the amount of paperwork.


Maintaining the privacy and safety of those using our services is very important to us.  Information gathered about you is personal and private.  We collect information only as required by law or funders, when appropriate to provide services, or manage our organization.





This agency has a confidential policy that has been approved by its Board of Directors.  This policy follows all HUD confidentiality regulations that are applicable to this agency, including those covering programs that receive HUD funding for homeless services.  Separate rules apply for HIPPA privacy and security regulations regarding medical records.


This agency will use and disclose personal information from HMIS only in the following circumstances:

  1. To coordinate or provide services.
  2. For functions related to payment or reimbursement for services.
  3. To carry out administrative functions including, but not limited to legal, audit, personnel, planning, oversight or management functions.
  4. Databases used for research, where all identifying information has been removed.
  5. Contractual research where privacy conditions are met.
  6. Where a disclosure is required by law and disclosure complies with and is limited to the requirements of the law. Instances where this might occur are during a medical emergency, to report a crime against staff of the agency or a crime on agency premises, or to avert a serious threat to health or safety, including a person’s attempt to harm him or herself.
  7. To comply with government reporting obligations.
  8. In connection with a court order, warrant, subpoena or other court proceeding where disclosure is required.




As a client receiving services at this agency, you have the following rights:

  1. Access to your record. You have the right to review your HMIS record.  At your request, we will assist in viewing the record within five working days.
  2. Correction of your record.  You have the right to request to have your record corrected so that information is up-to-date and accurate to ensure fairness in its use.
  3.    Our ability to assist you depends on having certain personal identifying information.  If you choose not to share the information we request, we reserve the right to decline to provide you with services as doing so could jeopardize our status as a service provider.
  4. Agency’s Right to Refuse Inspection of an Individual Record.  Our agency may deny you the right to inspect or copy your personal information for the following reasons:
    1. Information is compiled in reasonable anticipation of litigation or comparable proceedings;
    2. Information about another individual other than the agency staff would be disclosed;
    3. Information was obtained under a promise of confidentiality other than a promise from this provider and disclosure would reveal the source of the information; or
    4. Information, the disclosure of which, would be reasonably likely to endanger the life or physical safety of any individual.
  5.   The agency reserves the right to reject repeated or harassing requests for access or correction. However, if the agency denies your request for access or correction, you will be provided written documentation regarding your request and the reason for denial. A copy of that documentation will also be included in your client record.
  6.   You have the right to be heard if you feel that your confidentiality rights have been violated, if you have been denied access to your personal records, or if you have been put at personal risk, or harmed.  Our agency has established a formal grievance process for you to use in such a circumstance.   To file a complaint or grievance you should contact our Executive Director at 636-441-1302, ext. 230.




Protecting the safety and privacy of individuals receiving services and the confidentiality of their records is of paramount importance to us.  Through training, policies, procedures and software, we have taken the following steps to make sure your information is kept safe and secure:

  1. The computer program we use has the highest degree of security protection available.
  2. Only trained and authorized individuals will enter or view your personal information, and employees receive training in privacy protection and agree to follow strict confidentiality standards before using the system.
  3. Your name and other identifying information will not be contained in HMIS reports that are issued to local, state or national agencies.
  4. The server/database/software only allows individuals access to the information.  Only those who should see certain information will be allowed to see that information.
  5. The server/database will communicate using 128-bit encryption-an Internet technology intended to keep information private while it is transported back and forth across the Internet.  Furthermore, identifying data stored on the server is also encrypted or coded so that it cannot be recognized.
  6. The server/database exists behind a firewall-a device meant to keep hackers/crackers/viruses/etc. away from the server.
  7. The main database will be kept physically secure, meaning only authorized personnel will have access to the server/database.
  8. System Administrators employed by the HMIS and the agency support the operation of the database.  Administration of the database is governed by agreements that limit the use of personal information to providing administrative support and generating reports using aggregated information. These agreements further insure the confidentiality of your personal information.




Information you provide us can play an important role in our ability and the ability of other agencies to continue to provide the services that you and others in the community are requesting.


Allowing us to share your name results in a more accurate count of individuals and the services they use. Obtaining an accurate count is important because it can help us and other agencies:

  1. Better demonstrate the need for services and the specific types of assistance needed in our area.
  2. Obtain more money and other resources to provide services.
  3. Plan and deliver quality services to you and your family.
  4. Assist the agency to improve its work with families and individuals who are homeless.
  5. Keep required statistics for state and federal funders, such as HUD.




Ownership of data collected and entered into the HMIS is jointly held by the contributing

HMIS organizations and the MO-503 Continuum of Care.



This agency complies with all other federal, state and local laws regarding privacy rights. Please consult with an attorney if you have questions regarding these rights.




The policies covered under this Privacy Notice may be amended over time and those amendments may affect information obtained by the agency before the date of the change.  All amendments to the Privacy Notice must be consistent with the requirements of the Federal Standards that protect the privacy of consumers and guide CISS implementation and operation.




We maintain a copy of the Privacy Notice on our web site at:



A written copy of this Policy is available to all who request it.