Skip to Content

University at Buffalo (UB)

Office of the VPCIO

University at Buffalo (UB)

Office of the VPCIO

UB Information Technology

9/14/23 Services
10/10/23 News and Alerts
1/31/18 IT Policies
8/18/23 About Us

9/14/23 Services
10/10/23 News and Alerts
1/31/18 IT Policies
8/18/23 About Us

Search

New to UB
Students
Faculty
Staff
IT staff
VPCIO staff
Former UB

UBIT >
IT Policies >
Handling Restricted Data at UB >
UBIT Policy, HIPAA, FERPA and the Breach Notification Act >
UBIT HIPAA Policy

UBIT HIPAA Policy

Learn how UB Information Technology complies with the Health Insurance Portability and Accountability Act of 1996 (HIPAA).

Contents

12/2/19 Protected Health Information Security Policy (UBIT HIPAA)
11/9/22 Protected Health Information Security Sanction Policy (UBIT HIPAA)
12/2/19 Security Management Process Policy (UBIT HIPAA)
12/2/19 Risk Analysis Policy (UBIT HIPAA)
12/2/19 Risk Management Policy (UBIT HIPAA)
12/2/19 Information System Activity Review Policy (UBIT HIPAA)
12/2/19 Assigned Workforce Security Responsibility Policy (UBIT HIPAA)
12/2/19 Workforce Security Policy (UBIT HIPAA)
12/2/19 Authorization and/or Supervision Policy (UBIT HIPAA)
12/2/19 Workforce Clearance Policy (UBIT HIPAA)
12/2/19 Termination Procedures Policy (UBIT HIPAA)
12/2/19 Information Access Management Policy (UBIT HIPAA)
12/2/19 Access Authorization Policy (UBIT HIPAA)
12/2/19 Access Establishment and Modification Policy (UBIT HIPAA)
12/2/19 Security Awareness and Training Policy (UBIT HIPAA)
12/2/19 Access Security Reminders Policy (UBIT HIPAA)
12/2/19 Protection from Malicious Software Policy (UBIT HIPAA)
12/2/19 Log-in Monitoring Policy (UBIT HIPAA)
12/2/19 Password Management Policy (UBIT HIPAA)
12/2/19 Addressing Security Incidents Policy (UBIT HIPAA)
12/2/19 Identifying and Responding to Security Incidents Policy (UBIT HIPAA)
12/2/19 Contingency Plan Policy (UBIT HIPAA)
12/2/19 Data Backup Plan Policy (UBIT HIPAA)
11/15/22 Disaster Recovery Plan Policy (UBIT HIPAA)
12/2/19 Emergency Mode Operation Plan Policy (UBIT HIPAA)
12/2/19 Contingency Plan Testing and Revision Policy (UBIT HIPAA)
12/2/19 Application and Data Criticality Analysis Policy (UBIT HIPAA)
12/2/19 Evaluation Policy (UBIT HIPAA)
12/2/19 Business Associate Agreement Policy (UBIT HIPAA)
12/2/19 Facility Access Controls Policy (UBIT HIPAA)
12/2/19 Contingency Operations Policy (UBIT HIPAA)
12/2/19 Facility Security Plan Policy (UBIT HIPAA)
12/2/19 Access Control and Validation Procedures Policy (UBIT HIPAA)
11/16/22 Maintenance Records Policy (UBIT HIPAA)

12/2/19 Workstation Use Policy (UBIT HIPAA)
12/2/19 Workstation Security Policy (UBIT HIPAA)
12/2/19 Device and Media Controls Policy (UBIT HIPAA)
11/16/22 Disposal Policy (UBIT HIPAA)
12/2/19 Media Re-Use Policy (UBIT HIPAA)
12/2/19 Accountability Policy (UBIT HIPAA)
12/2/19 Data Backup and Storage Policy (UBIT HIPAA)
12/2/19 Access Control Policy (UBIT HIPAA)
12/2/19 Unique User Identification Policy (UBIT HIPAA)
12/2/19 Emergency Access Procedure Policy (UBIT HIPAA)
12/2/19 Automatic Logoff Policy (UBIT HIPAA)
12/2/19 Encryption and Decryption Policy (UBIT HIPAA)
12/2/19 Audit Controls Policy (UBIT HIPAA)
12/2/19 Integrity Policy (UBIT HIPAA)
12/2/19 Mechanism to Authenticate ePHI Policy (UBIT HIPAA)
12/2/19 Person or Entity Authentication Policy (UBIT HIPAA)
12/2/19 Transmission Security Policy (UBIT HIPAA)
12/2/19 Integrity Controls Policy (UBIT HIPAA)
12/2/19 Encryption Policy (UBIT HIPAA)
12/2/19 Business Associate Contracts or Other Arrangements Policy (UBIT HIPAA)
12/2/19 Business Associate Contracts Policy (UBIT HIPAA)
12/2/19 Other Arrangements Policy (UBIT HIPAA)
12/2/19 Policies and Procedures Policy (UBIT HIPAA)
12/2/19 Documentation Policy (UBIT HIPAA)
12/2/19 Time Limit Policy (UBIT HIPAA)
12/2/19 Availability Policy (UBIT HIPAA)
12/2/19 Updates Policy (UBIT HIPAA)
12/2/19 Notifications to Individuals Policy (UBIT HIPAA)
12/2/19 Timeliness of Notifications Policy (UBIT HIPAA)
12/2/19 Content of Notification Policy (UBIT HIPAA)
12/2/19 Methods of Individual Notification Policy (UBIT HIPAA)
11/15/22 Uses and Disclosures for which an Authorization is Required (UBIT HIPAA)
12/2/19 Document and Retention Policy (UBIT HIPAA)
12/2/19 HIPAA Procurement Policy

See also

Code of Federal Regulation, Title 45 Public Welfare, Part 164 Security and Privacy: HIPAA
HIPAA Definitions
NIST Glossary (PDF)
NYS Department of Health, HIPAA Preemption Charts (PDF)
UB HIPAA Research Homepage
US Department of Health & Human Services, Health Information Privacy
US Department of Health & Human Services, Office of Civil Rights, HIPAA Administrative Simplification Regulation Text 45 CFR Parts 160, 162, and 164 (PDF)

UBIT >
IT Policies >
Handling Restricted Data at UB >
UBIT Policy, HIPAA, FERPA and the Breach Notification Act >
UBIT HIPAA Policy

Help

8/25/23 UBIT Help Center
11/3/22 Getting Help from Your Department
5/30/23 Safe Computing

6/14/23 New to UB
9/14/23 Student service guides
10/31/23 Faculty service guides
8/30/23 Staff service guides

10/18/22 Services A-Z
6/26/23 Cost of Services

News and Alerts

11/3/23 All UBIT News
8/29/23 UBIT Alerts
8/25/23 UBIT Blog
11/15/23 Tech Talk with UB VPCIO Brice Bible

About Us

5/9/23 Strategic Initiatives + Engagement
10/17/22 Governance and Advisory Groups
3/27/19 Our People
12/21/20 UBIT Jobs

Forms

UBIT Help Center Online (login)

9/8/20 Request UB Learns Administrative Course Site
9/8/20 Request UB Learns Course Combination
12/30/22 Request a New Listserv List
12/30/22 Request to Delete a Listserv List
12/20/22 Request to Send Mass Email
9/15/23 MyUB Contact
7/19/22 Level Up Space Use Request

IT Policies

6/16/20 Official IT Policy Library
8/10/23 IT Guidance Documents & UBIT Policies
10/24/18 Handling Restricted Data at UB

Follow UBIT

University at Buffalo. All rights reserved. | Privacy | Accessibility