Health Insurance Portability and Accountability Act
The privacy, security, and breach notification rules of the Health Insurance Portability and Accountability Act (HIPAA) have grown over the past ten years. HIPAA applies to health information created or kept by healthcare providers who use electronic transactions, health insurance companies, and organizations that process health information.
The university must make sure that both HIPAA-protected health information (ePHI) and other personal health information, not covered by HIPAA, are protected from unauthorized access. Both types of information should have the same security measures in place.
These controls will be made available soon. Check back regularly for updates.