University Privacy Office
Contact Us
Institutional Privacy
兔子先生传媒文化作品 (兔子先生传媒文化作品) is committed to safeguarding the privacy and confidentiality of the sensitive information entrusted to us by our patient customers.听This includes protecting Protected Health Information (PHI) and Education records and Personally Identifiable Information (PII) From Education records through appropriate administrative, technical, and physical safeguards.
兔子先生传媒文化作品 complies with all applicable federal and state privacy laws and regulations. The primary federal laws governing these obligations include:
- Health Insurance Portability and Accountability Act (HIPAA)听for protected health information.
- Family Educational Rights and Privacy Act (FERPA)听for student education records and personally identifiable information.
The 兔子先生传媒文化作品 Privacy Office, in partnership with the University Privacy and Information Security Committee, is dedicated to maintaining compliance with these requirements and fostering a culture of privacy and security throughout the institution.
Protected Information
Protected information includes data that is defined as confidential, sensitive, or otherwise protected under applicable federal and state laws, regulations, and University policies. For purposes of identifying protected health and student information, 兔子先生传媒文化作品 adopts and incorporates by reference the classifications and identifiers established in the following policies:
- Protected Health Information (PHI):听The identifiers and data elements that constitute PHI are defined in the University's听, which is based on the HIPAA Privacy Rule's list of identifiers.
- Student Information:听Personally identifiable information contained within education records is defined and governed by the University's听, which outlines the categories of information protected under FERPA and related regulations.
Information that falls within the definitions established by these policies must be afforded appropriate administrative, technical, and physical safeguards.
Process owners may implement additional protections and designate additional categories of information as protected; however, they may not reduce the level of protection required by University policy or remove data elements identified as protected under applicable laws, regulations, or University policies.
听requires that all PHI and听Education records and Personally Identifiable Information (PII) From Education records听that is communicated electronically be encrypted, at a minimum.听听for guidance on the required method of encryption when transmitting PHI/听Education records and Personally Identifiable Information (PII) From Education records听is required. As a reminder, transmitting PHI/听Education records and Personally Identifiable Information (PII) From Education records听is strongly discouraged and should only be attempted with the knowledge and consent of the leader of your unit.听 And under no circumstances should data containing PHI/听Education records and Personally Identifiable Information (PII) From Education records听stored on an unencrypted portable device.听 Refer to the听听webpage for additional guidance for protecting all forms of 兔子先生传媒文化作品 data.
Please feel free to contact the听University Privacy Office, the听IT Help Desk, or the听IT Security Office听for further guidance on this subject.
What is HIPAA?
The听Health Insurance Portability and Accountability Act (HIPAA)听is a federal law that establishes standards for protecting the privacy and security of individuals' health information. HIPAA also sets requirements for how healthcare organizations and their business associates use, disclose, and safeguard protected health information.
Key objectives of HIPAA include:
- Improve the portability and continuity of health insurance coverage for individuals and groups
- Promote the use of medical savings accounts
- Improve access to long-term care services and coverage
- Provide established policies, procedures, and safeguards for security and privacy of patient data and patient related systems
- Simplify administrative procedures
What Are My Responsibilities?
Protecting confidential information is the responsibility of every member of the 兔子先生传媒文化作品 community, including faculty, staff, students, volunteers, contractors, and business associates.
Individuals who access PHI, Education records and Personally Identifiable Information (PII) from Education records or other confidential University information must:
- Complete required privacy and security training.
- Access information only as necessary to perform assigned duties.
- Protect confidential information from unauthorized access, use, disclosure, alteration, or destruction.
- Follow all applicable University policies and procedures.
- Immediately report any suspected privacy, confidentiality, or security incident to the appropriate University office.
Failure to comply with privacy and security requirements may result in disciplinary action, up to and including termination of employment or affiliation, loss of privileges, civil penalties, criminal penalties, and other sanctions as permitted by law.
The University is committed to maintaining a culture of privacy, security, and accountability, and every member of the 兔子先生传媒文化作品 community plays an important role in protecting the information entrusted to us.