Skip to Content

Your Privacy is Important To Us.

Buffalo.edu uses cookies to help build a better website experience for our visitors. Learn more in our Privacy Policy

Office of the VPCIO

University at Buffalo (UB)

Office of the VPCIO

UB Information Technology

6/24/26 Services
6/24/26 News and Alerts
6/24/26 IT Policies
6/24/26 About Us

6/24/26 Services
6/24/26 News and Alerts
6/24/26 IT Policies
6/24/26 About Us

Search

New to UB
Students
Faculty
Staff
IT staff
UBIT staff
Former UB

UBIT >
IT Policies >
Handling Restricted Data at UB >
UBIT Policy, HIPAA, FERPA and the Breach Notification Act >
UBIT HIPAA Policy

UBIT HIPAA Policy

Learn how UB Information Technology complies with the Health Insurance Portability and Accountability Act of 1996 (HIPAA).

Contents

6/24/26 Protected Health Information Security Policy (UBIT HIPAA)
6/24/26 Protected Health Information Security Sanction Policy (UBIT HIPAA)
6/24/26 Security Management Process Policy (UBIT HIPAA)
6/24/26 Risk Analysis Policy (UBIT HIPAA)
6/24/26 Risk Management Policy (UBIT HIPAA)
6/24/26 Information System Activity Review Policy (UBIT HIPAA)
6/24/26 Assigned Workforce Security Responsibility Policy (UBIT HIPAA)
6/24/26 Workforce Security Policy (UBIT HIPAA)
6/24/26 Authorization and/or Supervision Policy (UBIT HIPAA)
6/24/26 Workforce Clearance Policy (UBIT HIPAA)
6/24/26 Termination Procedures Policy (UBIT HIPAA)
6/24/26 Information Access Management Policy (UBIT HIPAA)
6/24/26 Access Authorization Policy (UBIT HIPAA)
6/24/26 Access Establishment and Modification Policy (UBIT HIPAA)
6/24/26 Security Awareness and Training Policy (UBIT HIPAA)
6/24/26 Access Security Reminders Policy (UBIT HIPAA)
6/24/26 Protection from Malicious Software Policy (UBIT HIPAA)
6/24/26 Log-in Monitoring Policy (UBIT HIPAA)
6/24/26 Password Management Policy (UBIT HIPAA)
6/24/26 Addressing Security Incidents Policy (UBIT HIPAA)
6/24/26 Identifying and Responding to Security Incidents Policy (UBIT HIPAA)
6/24/26 Contingency Plan Policy (UBIT HIPAA)
6/24/26 Data Backup Plan Policy (UBIT HIPAA)
6/24/26 Disaster Recovery Plan Policy (UBIT HIPAA)
6/24/26 Emergency Mode Operation Plan Policy (UBIT HIPAA)
6/24/26 Contingency Plan Testing and Revision Policy (UBIT HIPAA)
6/24/26 Application and Data Criticality Analysis Policy (UBIT HIPAA)
6/24/26 Evaluation Policy (UBIT HIPAA)
6/24/26 Business Associate Agreement Policy (UBIT HIPAA)
6/24/26 Facility Access Controls Policy (UBIT HIPAA)
6/24/26 Contingency Operations Policy (UBIT HIPAA)
6/24/26 Facility Security Plan Policy (UBIT HIPAA)
6/24/26 Access Control and Validation Procedures Policy (UBIT HIPAA)
6/24/26 Maintenance Records Policy (UBIT HIPAA)

6/24/26 Workstation Use Policy (UBIT HIPAA)
6/24/26 Workstation Security Policy (UBIT HIPAA)
6/24/26 Device and Media Controls Policy (UBIT HIPAA)
6/24/26 Disposal Policy (UBIT HIPAA)
6/24/26 Media Re-Use Policy (UBIT HIPAA)
6/24/26 Accountability Policy (UBIT HIPAA)
6/24/26 Data Backup and Storage Policy (UBIT HIPAA)
6/24/26 Access Control Policy (UBIT HIPAA)
6/24/26 Unique User Identification Policy (UBIT HIPAA)
6/24/26 Emergency Access Procedure Policy (UBIT HIPAA)
6/24/26 Automatic Logoff Policy (UBIT HIPAA)
6/24/26 Encryption and Decryption Policy (UBIT HIPAA)
6/24/26 Audit Controls Policy (UBIT HIPAA)
6/24/26 Integrity Policy (UBIT HIPAA)
6/24/26 Mechanism to Authenticate ePHI Policy (UBIT HIPAA)
6/24/26 Person or Entity Authentication Policy (UBIT HIPAA)
6/24/26 Transmission Security Policy (UBIT HIPAA)
6/24/26 Integrity Controls Policy (UBIT HIPAA)
6/24/26 Encryption Policy (UBIT HIPAA)
6/24/26 Business Associate Contracts or Other Arrangements Policy (UBIT HIPAA)
6/24/26 Business Associate Contracts Policy (UBIT HIPAA)
6/24/26 Other Arrangements Policy (UBIT HIPAA)
6/24/26 Policies and Procedures Policy (UBIT HIPAA)
6/24/26 Documentation Policy (UBIT HIPAA)
6/24/26 Time Limit Policy (UBIT HIPAA)
6/24/26 Availability Policy (UBIT HIPAA)
6/24/26 Updates Policy (UBIT HIPAA)
6/24/26 Notifications to Individuals Policy (UBIT HIPAA)
6/24/26 Timeliness of Notifications Policy (UBIT HIPAA)
6/24/26 Content of Notification Policy (UBIT HIPAA)
6/24/26 Methods of Individual Notification Policy (UBIT HIPAA)
6/24/26 Uses and Disclosures for which an Authorization is Required (UBIT HIPAA)
6/24/26 Document and Retention Policy (UBIT HIPAA)
6/24/26 HIPAA Procurement Policy

See also

Code of Federal Regulation, Title 45 Public Welfare, Part 164 Security and Privacy: HIPAA
NIST Glossary (PDF)
NYS Department of Health, HIPAA Preemption Charts (PDF)
UB HIPAA Research Homepage
US Department of Health & Human Services, Health Information Privacy
US Department of Health & Human Services, Office of Civil Rights, HIPAA Administrative Simplification Regulation Text 45 CFR Parts 160, 162, and 164 (PDF)

UBIT >
IT Policies >
Handling Restricted Data at UB >
UBIT Policy, HIPAA, FERPA and the Breach Notification Act >
UBIT HIPAA Policy

Help

6/24/26 UBIT Help Center
6/24/26 Getting Help from Your Department
6/24/26 Safe Computing

6/24/26 New to UB
6/24/26 Student service guides
6/24/26 Faculty service guides
6/24/26 Staff service guides

6/24/26 Services A-Z
6/24/26 Cost of Services

News and Alerts

6/24/26 All UB Tech News
6/24/26 UBIT Alerts
6/24/26 UB Tech Talk Video Podcast

About Us

6/24/26 Strategic Initiatives + Engagement
6/24/26 Governance and Advisory Groups
6/24/26 Our People
6/24/26 UBIT Jobs
6/24/26 UBIT Mission, Vision, Values, Goal Statements

Forms

6/24/26 Submit a Ticket
Request UB Learns Course Combination
Request UB Learns Administrative Course Site
6/24/26 Request to Send Mass Email
6/24/26 Request to Delete a Listserv List
6/24/26 Request a New Listserv List
6/24/26 MyUB Contact
7/19/22 Level Up Space Use Request

IT Policies

6/24/26 UB Policy Library
6/24/26 Handling Restricted Data at UB
6/24/26 IT Policies, Standards and Guidelines

Follow UBIT

UBIT on X (Formerly known as Twitter)

Send corrections to ubit-communication@buffalo.edu

University at Buffalo. All rights reserved. | Privacy | Accessibility