Graduate Management Admission Council (“GMAC”) is committed to respecting the privacy of your health data. This Consumer Health Data Privacy Policy describes what consumer health data GMAC collects and uses.
Under the Washington State My Health My Data Act (the “Act”) and similar state consumer health privacy laws, “consumer health data” means personal information that is linked or reasonably linkable to a consumer and that identifies the consumer's past, present, or future physical or mental health status.
GMAC collects, uses and shares consumer health data only as needed to provide the services you request, including test accommodations for GMAC’s assessments.
Categories of Consumer Health Data We Collect and Purposes
For the purpose of test accommodations evaluations, eligibility determinations and administration of test accommodations:
- medical information concerning the nature of your mental or physical impairment and how it limits major life activities
- information on how your mental or physical impairment affects your ability to take a GMAC assessment under standard conditions
- information regarding treatment, medication, devices, or auxiliary aids used
- your history of accommodations
- a rationale for why the requested accommodation(s) is/are necessary and appropriate relative to your impairment(s)
Sources of Consumer Health Data
GMAC collects consumer health data from individuals that request test accommodations.
Categories of Third Parties with Whom We May Share Consumer Health Data
GMAC does not sell consumer health data. GMAC may share the categories of consumer health data described above with certain third parties as follows.
- Qualified independent professionals who assess the information in order to recommend to GMAC whether requested test accommodations are necessary and appropriate.
- Trusted service providers and contractors such as Pearson VUE and Examity that deliver GMAC assessments on behalf of GMAC or who otherwise assist us to provide our products and services to you. These service providers and contractors may use the data only as permitted in our agreements with them.
- GMAC employees, agents, and representatives as needed to administer test accommodations, character and fitness investigations or for the other purposes described above.
- As required or permitted by law, including with your consent and as needed to prevent, detect, protect against, or respond to security incidents, fraud, and as needed to preserve the integrity or security of our systems, or to investigate, report, or prosecute those responsible for any action that is illegal under applicable state or Federal law.
- For emergency medical or safety purposes.
Your Consumer Health Data Privacy Rights
In certain states, such as Washington, you have specific rights regarding your consumer health data (subject to certain exceptions). This section describes your rights and explains how to exercise those rights. We will not discriminate against you for exercising any of your rights.
- You have the right to know if we are collecting, using or sharing your consumer health data, to access such data and to receive a list of the categories of third parties with whom we have shared your information.
- You have the right to withdraw your consent if we are processing your consumer health data with your consent.
- You have the right to request that we delete your consumer health data.
To exercise these rights, please contact us. We will need to authenticate your request and process it as required by applicable laws, generally within 45 days of us receiving your request. You have the right to appeal if we deny your request by requesting a review of our decision. If we deny your appeal, you may contact the Washington State Attorney General to submit a complaint.
Contact Us
GMAC can also be contacted at:
Graduate Management Admission Council
PO Box 2969
Reston, VA 20195
USA
Attention: Data Protection Officer
Email: privacy@gmac.com
Phone: +1 (703) 668-9600
Toll-free in the U.S.: (800) 811-8042
Changes to this Privacy Policy
GMAC can modify this Consumer Health Data Privacy Policy at any time. When changes are made to this Privacy Policy, we will update the “last modified” date above.