Des Moines University Medicine and Health Sciences (DMU) Continuing Medical Education (CME) is committed to providing high-quality continuing education while protecting the privacy, confidentiality, and rights of individuals who engage with its programs and services. This policy outlines DMU CME's practices regarding nondiscrimination, accessibility, privacy, confidentiality, information security, and compliance with applicable laws and regulations. It applies to individuals who interact with DMU CME, including those who create learner profiles, register for or participate in educational activities, serve as faculty or planners, exhibit at activities, or receive program communications. DMU CME collects, uses, maintains, and shares information as necessary to administer educational activities, maintain accreditation, and report continuing education credits to appropriate accreditation and licensure organizations. Participation in DMU CME services is voluntary and subject to the practices described in this policy. DMU CME may update this policy periodically to reflect changes in applicable laws, accreditation requirements, or institutional practices.

Accessibility and Accommodations (ADA)

DMU seeks to provide individuals with disabilities equal access to its educational activities and services in accordance with the Americans with Disabilities Act (ADA) and other applicable laws. Individuals who need reasonable accommodations should contact [email protected] or 515-271-1596.

Anonymous Visitors

DMU respects your right to privacy. The university collects and analyzes general usage information about visitors coming to our websites using server log analysis tools. This information is used to help us improve the quality of our sites and our infrastructure needed to support them.

CME Clinical Content Validation Policy

  • All recommendations involving clinical medicine in a CME activity must be based on evidence accepted within the profession of medicine as adequate justification for their indications and contraindications in patient care.
  • All scientific research referred to, reported, or used in CME to support or justify a patient care recommendation must conform to the generally accepted standards of experimental design, data collection, and analysis.
  • Providers are not eligible for accreditation or reaccreditation if they present activities that promote recommendations, treatment, or manners of practicing medicine that are not within the definition of CME, are known to have risks or dangers that outweigh the benefits, or are known to be ineffective in treating patients. An organization whose CME program advocates unscientific modalities of diagnosis or therapy is not eligible to apply for accreditation.

Collection and Use of Information

  • Information you provide to create a profile and pay for products and services. This is all the personal and professional information needed to interact with DMU CME Services. We use this information to verify your identity and your eligibility to receive DMU CME Services. We also use certain information items, such as your email and answers to password verification questions, to validate your identity if you need to recover your account password. If you choose to purchase products or services from us, we also collect information necessary to process your payment and complete your transaction.
  • Information we collect automatically. The Web server automatically collects the Internet Protocol (IP) address of the computers that access our site. An IP address is a number assigned to your computer when you access the Internet. We use this information to understand how our site is used and how we can better serve visitors. We also collect information about visitors to our site using "cookies." We use this technology to recognize repeat visitors and offer them the services or information they requested during a previous visit. We use session cookies to track a visitor's path through our site during a visit and help us understand how people use our site.
  • Google Analytics uses cookies or other tracking technologies to help us analyze how users interact with and use the Website, compile reports on the Website’s activity, and provide other services related to the Website's activity and usage. The technologies used by Google may collect information such as your IP address, time of visit, whether you are a return visitor, and any referring website. This Site does not use Google Analytics to gather the information that personally identifies you. Google Analytics will transmit and store the information it generates and subject it to Google’s privacy policies. Learn more about Google’s partner services and how to opt out of tracking analytics by Google.
  • Your browser or device may include “Do Not Track” functionality. We do not respond to browser “Do Not Track” signals.

Confidentiality

DMU protects the confidentiality of personal, professional, and educational records, including learner profiles, participation records, evaluations, and continuing education credit records. Such information is accessed, used, retained, and disclosed for legitimate educational, operational, accreditation, reporting, and legal purposes, consistent with this Privacy Policy and applicable law. Access is limited to authorized persons with an appropriate business need, and DMU maintains reasonable administrative and technical safeguards.

Compliance with Applicable Laws

DMU is committed to complying with applicable federal, state, and local laws in the administration of its continuing education services, including, as applicable, the ADA, DMCA, and HIPAA.

Complaint Process

If you have a complaint or problem or believe your privacy rights have been violated, you may email us by clicking the "Contact Us" link. Please indicate the following reason for contacting us: Grievance. A member of the DMU CME team will respond within two (2) business days. 

Cookies

Our web servers may collect general information with the help of cookies. A cookie is a small file that a website writes to your hard drive when you visit that site. Cookies cannot read information from your hard drive or read information from other cookies. Cookies are used on our sites to help us analyze sessions and general traffic patterns throughout our site. If you turn off cookies in your web browser, you will still be able to access and browse most of the university sites.

Copyright and Digital Millennium Copyright Act (DMCA)

DMU respects intellectual property rights and complies with applicable copyright law, including the Digital Millennium Copyright Act (DMCA). Speakers, planners, and contributors are responsible for ensuring educational content is original, licensed, used with permission, or otherwise lawfully used. Suspected copyright infringement in DMU materials or online services may be reported to [email protected] for review and referral under the University’s copyright compliance procedures. Formal DMCA notices must follow the University’s applicable designated-agent procedure.

Copyright and Trademark Information

The marks "Des Moines University," "Des Moines University Medicine and Health Sciences," "DMU," and the DMU logo are trademarks and/or service marks of DMU. DMU and its affiliates' website content and design are protected by U.S. and international copyright laws. You may not copy, reproduce, republish, upload, post, display, transmit, or frame any of these materials without prior written consent from DMU, except that you may view, download, display, and print a single copy of these materials on a single computer for personal, noncommercial use only, so long as (1) you do not alter or modify the materials in any way; (2) you include all applicable notices and disclaimers (including copyright notices); and (3) you do not use the materials in a way that suggests an association with DMU or an affiliated DMU entity. You understand and agree that these materials' titles shall not be passed to you or any other user. DMU Copyright Compliance Policy.

Data Retention

We will retain your information for as long as your account is active or as needed to provide services, comply with our legal obligations, resolve disputes, and enforce our agreements.

Data Processed and Stored in the United States

You understand and agree that the information you provide is transmitted to, processed in, and stored in the United States.

Discontinuance of Service

DMU reserves the right to terminate, modify, or discontinue, temporarily or permanently, the DMU CME Services at any time, with or without notice. In addition, DMU may terminate, modify, or limit any or all of the DMU CME Services if you violate the terms of this Agreement or any other agreement with DMU, you violate any law, or if we determine, for any other reason, that it is no longer appropriate for you to use those DMU CME Services.

Dispute Resolution

You agree that any dispute or claim (including personal injury claims) related to your use of DMU CME Services is subject to the exclusive jurisdiction of the state of Iowa and that the laws of the state of Iowa shall govern any such dispute. This agreement also applies to anyone claiming on your behalf.

Health Information Privacy (HIPAA)

DMU complies with the Health Insurance Portability and Accountability Act (HIPAA) to the extent applicable to its activities. Faculty, planners, and other contributors must protect patient confidentiality in clinical cases, presentations, recordings, and educational materials. Protected health information will not be disclosed without an appropriate authorization or other lawful basis. De-identified information will be used whenever feasible.

Information Sharing and Disclosure

  • We may share your personally identifiable information with a third party if we believe that disclosure is necessary to conform to legal requirements or to respond to a subpoena, search warrant, or other legal process received by us; to enforce the Terms of Use or to protect our legal rights; or to protect the safety of members of the public.
  • We may share the information you provide to us, and that we collect about you, with those with whom we have a joint partnership agreement or accreditation/licensure to deliver DMU CME Services.
  • We do not share your personal information with unaffiliated third parties for their direct marketing purposes.  We may, however, share your data with DMU entities or affiliates.

Limitation Of Liability

The use of the DMU CME Services is entirely at your own risk, and in no event shall DMU be liable for any direct, indirect, incidental, consequential, special, exemplary, punitive, or any other monetary or other damages, fees, fines, penalties, or liability arising out of or relating in any way to the DMU CME Services, or sites accessed through the DMU CME Services, and/or content or information provided herein. Your sole and exclusive remedy for dissatisfaction with the service is to stop using the service.

Online Submissions

When we ask for information through the use of an online form or through any other means such as phone, fax, or mail, we will keep your information private. Some submission forms use Secure Socket Layer encryption technology for browsers where enabled. DMU does not sell or otherwise give away your private information to any third party for their use. We may provide information to assist in proper licensing of software and to subcontractors providing services to our university communities and for statistical reporting purposes.

Persons Under the Age of 18

We are committed to protecting children’s privacy on the Internet. This site is intended for persons aged 18 and older.  We do not knowingly collect personal information from children. If you are under 18, please have a parent/guardian contact us at [email protected] before engaging with DMU CME Services.

Security

DMU uses encryption and reviews its security practices to help protect information submitted through its services. No electronic transmission or storage system is completely secure, and information transmitted over the Internet may be exposed to risks outside DMU control. DMU maintains reasonable safeguards consistent with applicable law and encourages users to protect their account credentials and promptly report suspected unauthorized access.

Warranties

You understand and agree that the DMU CME Services are provided on an “as is” basis. DMU does not make any express or implied warranties, representations, or endorsements whatsoever (including without limitation warranties of title or non-infringement, or the implied warranties of merchantability or fitness for a particular purpose) concerning the service or any merchandise, information, or service provided in connection with the DMU CME services account. In addition, DMU does not guarantee that the use of the DMU CME Services will be free from technological difficulties including, but not limited to, unavailability of information, downtime, service disruptions, viruses or worms, and you understand that you are responsible for implementing sufficient procedures and checkpoints to satisfy your particular requirements for accuracy of data input and output.

User Agreements

By engaging with DMU CME Services, you agree:

  • The information you provide in connection with DMU CME Services is true and accurate and pertains to yourself;
  • You will not use the DMU CME Services for any illegal purpose or in a manner that violates local, state, national, or international laws;
  • You will not use the DMU CME Services to post or transmit material that may infringe or violate any rights of any party or is unlawful, obscene, defamatory, threatening, harassing, abusive, slanderous, hateful, or embarrassing to any other person or entity;
  • You will not use the DMU CME Services to attempt to disable, "hack," or otherwise interfere with the proper functioning of this website.

Users in the European Economic Area (EEA) and Switzerland

DMU recognizes the privacy rights of individuals in the European Economic Area (EEA) and Switzerland. Where applicable, personal information will be collected, processed, stored, and disclosed in accordance with the European Union General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP). DMU may request information necessary to verify an individual's identity before processing a privacy-related request. DMU will review and address requests in accordance with applicable legal requirements.

  • Purposes and Legal Basis for Processing: DMU processes personal information to administer continuing education activities, maintain learner records, issue certificates, report continuing education credits, communicate with participants, and fulfill applicable accreditation and legal requirements. Where the GDPR applies, processing will be based on an appropriate legal basis, which may include consent, contractual necessity, legitimate interests, or compliance with applicable legal obligations.
  • International Data Transfers: Personal information collected through DMU CME services may be processed and stored in the United States. Where applicable, transfers of personal information outside the EEA or Switzerland will be conducted in accordance with applicable data protection laws and appropriate safeguards or legally permitted exceptions.
  • Individual Privacy Rights: Depending on applicable law and individual circumstances, individuals may have the right to access their personal information, request corrections, request deletion, restrict or object to certain processing activities, and request data portability. Individuals may submit a data deletion request or contact DMU at [email protected] regarding other privacy requests. DMU may retain certain information when necessary to fulfill legal, accreditation, or other legitimate recordkeeping requirements.
  • Withdrawal of Consent: When processing is based on consent, individuals may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted before consent was withdrawn.
  • Privacy Complaints: Individuals may contact DMU CME at [email protected] with questions or concerns regarding the handling of their personal information. Where applicable, individuals also have the right to submit complaints to the appropriate data protection supervisory authority.

Original: September 7, 2021
Prior update(s): April 3, 2026
Revised draft: October 14, 2026