Skip to Content

COVID-19 UPDATES • 5/12/2022
- End of semester reminder to be extra cautious

Menu
Search

Loading menu...

UB Home
Maps
UB Directory

University at Buffalo

UB Information Technology

UBIT on Twitter

UBIT on YouTube

Services
News and Alerts
IT Policies
About Us

Search

Information for

New to UB
Students
Faculty
Staff
IT Staff
VPCIO Staff

UBIT >
IT Policies >
Handling Restricted Data at UB >
UBIT Policy, HIPAA, FERPA and the Breach Notification Act >
UBIT HIPAA Policy

UBIT HIPAA Policy

Learn how UB Information Technology complies with the Health Insurance Portability and Accountability Act of 1996 (HIPAA).

Contents

12/2/19 Protected Health Information Security Policy (UBIT HIPAA)
12/2/19 Protected Health Information Security Sanction Policy (UBIT HIPAA)
12/2/19 Security Management Process Policy (UBIT HIPAA)
12/2/19 Risk Analysis Policy (UBIT HIPAA)
12/2/19 Risk Management Policy (UBIT HIPAA)
12/2/19 Information System Activity Review Policy (UBIT HIPAA)
12/2/19 Assigned Workforce Security Responsibility Policy (UBIT HIPAA)
12/2/19 Workforce Security Policy (UBIT HIPAA)
12/2/19 Authorization and/or Supervision Policy (UBIT HIPAA)
12/2/19 Workforce Clearance Policy (UBIT HIPAA)
12/2/19 Termination Procedures Policy (UBIT HIPAA)
12/2/19 Information Access Management Policy (UBIT HIPAA)
12/2/19 Access Authorization Policy (UBIT HIPAA)
12/2/19 Access Establishment and Modification Policy (UBIT HIPAA)
12/2/19 Security Awareness and Training Policy (UBIT HIPAA)
12/2/19 Access Security Reminders Policy (UBIT HIPAA)
12/2/19 Protection from Malicious Software Policy (UBIT HIPAA)
12/2/19 Log-in Monitoring Policy (UBIT HIPAA)
12/2/19 Password Management Policy (UBIT HIPAA)
12/2/19 Addressing Security Incidents Policy (UBIT HIPAA)
12/2/19 Identifying and Responding to Security Incidents Policy (UBIT HIPAA)
12/2/19 Contingency Plan Policy (UBIT HIPAA)
12/2/19 Data Backup Plan Policy (UBIT HIPAA)
12/2/19 Disaster Recovery Plan Policy (UBIT HIPAA)
12/2/19 Emergency Mode Operation Plan Policy (UBIT HIPAA)
12/2/19 Contingency Plan Testing and Revision Policy (UBIT HIPAA)
12/2/19 Application and Data Criticality Analysis Policy (UBIT HIPAA)
12/2/19 Evaluation Policy (UBIT HIPAA)
12/2/19 Business Associate Agreement Policy (UBIT HIPAA)
12/2/19 Facility Access Controls Policy (UBIT HIPAA)
12/2/19 Contingency Operations Policy (UBIT HIPAA)
12/2/19 Facility Security Plan Policy (UBIT HIPAA)
12/2/19 Access Control and Validation Procedures Policy (UBIT HIPAA)
12/2/19 Maintenance Records Policy (UBIT HIPAA)

12/2/19 Workstation Use Policy (UBIT HIPAA)
12/2/19 Workstation Security Policy (UBIT HIPAA)
12/2/19 Device and Media Controls Policy (UBIT HIPAA)
12/2/19 Disposal Policy (UBIT HIPAA)
12/2/19 Media Re-Use Policy (UBIT HIPAA)
12/2/19 Accountability Policy (UBIT HIPAA)
12/2/19 Data Backup and Storage Policy (UBIT HIPAA)
12/2/19 Access Control Policy (UBIT HIPAA)
12/2/19 Unique User Identification Policy (UBIT HIPAA)
12/2/19 Emergency Access Procedure Policy (UBIT HIPAA)
12/2/19 Automatic Logoff Policy (UBIT HIPAA)
12/2/19 Encryption and Decryption Policy (UBIT HIPAA)
12/2/19 Audit Controls Policy (UBIT HIPAA)
12/2/19 Integrity Policy (UBIT HIPAA)
12/2/19 Mechanism to Authenticate ePHI Policy (UBIT HIPAA)
12/2/19 Person or Entity Authentication Policy (UBIT HIPAA)
12/2/19 Transmission Security Policy (UBIT HIPAA)
12/2/19 Integrity Controls Policy (UBIT HIPAA)
12/2/19 Encryption Policy (UBIT HIPAA)
12/2/19 Business Associate Contracts or Other Arrangements Policy (UBIT HIPAA)
12/2/19 Business Associate Contracts Policy (UBIT HIPAA)
12/2/19 Other Arrangements Policy (UBIT HIPAA)
12/2/19 Policies and Procedures Policy (UBIT HIPAA)
12/2/19 Documentation Policy (UBIT HIPAA)
12/2/19 Time Limit Policy (UBIT HIPAA)
12/2/19 Availability Policy (UBIT HIPAA)
12/2/19 Updates Policy (UBIT HIPAA)
12/2/19 Notifications to Individuals Policy (UBIT HIPAA)
12/2/19 Timeliness of Notifications Policy (UBIT HIPAA)
12/2/19 Content of Notification Policy (UBIT HIPAA)
12/2/19 Methods of Individual Notification Policy (UBIT HIPAA)
12/2/19 Uses and Disclosures for which an Authorization is Required (UBIT HIPAA)
12/2/19 Document and Retention Policy (UBIT HIPAA)
12/2/19 HIPAA Procurement Policy

See also

Code of Federal Regulation, Title 45 Public Welfare, Part 164 Security and Privacy: HIPAA
HIPAA Definitions
NIST Glossary (PDF)
NYS Department of Health, HIPAA Preemption Charts (PDF)
UB HIPAA Research Homepage
US Department of Health & Human Services, Health Information Privacy
US Department of Health & Human Services, Office of Civil Rights, HIPAA Administrative Simplification Regulation Text 45 CFR Parts 160, 162, and 164 (PDF)

UBIT >
IT Policies >
Handling Restricted Data at UB >
UBIT Policy, HIPAA, FERPA and the Breach Notification Act >
UBIT HIPAA Policy

Help

5/24/22 UBIT Help Center
8/20/21 Getting Help from Your Department
4/1/22 Safe Computing

Service Guides

5/19/22 New to UB
5/19/22 Student service guides
5/3/22 Faculty service guides
5/3/22 Staff service guides

Service List

5/11/22 Services A-Z
2/7/22 Cost of Services

News and Alerts

11/16/21 All UBIT News
4/1/19 UBIT Alerts
2/11/22 UBIT Blog

IT Policies

6/16/20 Official IT Policy Library
11/30/21 IT Guidance Documents & UBIT Policies
10/24/18 Handling Restricted Data at UB

Forms

UBIT Help Center Online (login)

9/8/20 Request UB Learns Administrative Course Site
9/8/20 Request UB Learns Course Combination
7/10/17 Request a New Listserv List
7/10/17 Request to Delete a Listserv List
1/28/21 Request to Send Mass Email
3/29/22 Request or Renew Secure Server Certificate
12/30/20 MyUB Contact

About Us

3/4/21 Strategic Initiatives + Engagement
7/12/21 Governance and Advisory Groups
3/27/19 Our People
12/21/20 UBIT Jobs

Follow UBIT

UBIT News RSS

UBIT Blog RSS Feed

University at Buffalo. All rights reserved. | Privacy | Accessibility