Skip to Content

Menu
Search

Loading menu...

UB Home
Maps
UB Directory

University at Buffalo

UB Information Technology

UBIT on Facebook

UBIT on Twitter

UBIT on YouTube

Service Guides
News and Alerts
Service Lists
About Us
IT Policies

Search

Search

Information for

Students
Faculty
Staff
IT Staff
CIT Staff

UBIT >
IT Policies >
Handling Restricted Data at UB >
UBIT Policy, HIPAA, FERPA and the Breach Notification Act >
UBIT HIPAA Policy

UBIT HIPAA Policy

Learn how UB Information Technology complies with the Health Insurance Portability and Accountability Act of 1996 (HIPAA).

Contents

12/2/19 Protected Health Information Security Policy (UBIT HIPAA)
12/2/19 Protected Health Information Security Sanction Policy (UBIT HIPAA)
12/2/19 Security Management Process Policy (UBIT HIPAA)
12/2/19 Risk Analysis Policy (UBIT HIPAA)
12/2/19 Risk Management Policy (UBIT HIPAA)
12/2/19 Information System Activity Review Policy (UBIT HIPAA)
12/2/19 Assigned Workforce Security Responsibility Policy (UBIT HIPAA)
12/2/19 Workforce Security Policy (UBIT HIPAA)
12/2/19 Authorization and/or Supervision Policy (UBIT HIPAA)
12/2/19 Workforce Clearance Policy (UBIT HIPAA)
12/2/19 Termination Procedures Policy (UBIT HIPAA)
12/2/19 Information Access Management Policy (UBIT HIPAA)
12/2/19 Access Authorization Policy (UBIT HIPAA)
12/2/19 Access Establishment and Modification Policy (UBIT HIPAA)
12/2/19 Security Awareness and Training Policy (UBIT HIPAA)
12/2/19 Access Security Reminders Policy (UBIT HIPAA)
12/2/19 Protection from Malicious Software Policy (UBIT HIPAA)
12/2/19 Log-in Monitoring Policy (UBIT HIPAA)
12/2/19 Password Management Policy (UBIT HIPAA)
12/2/19 Addressing Security Incidents Policy (UBIT HIPAA)
12/2/19 Identifying and Responding to Security Incidents Policy (UBIT HIPAA)
12/2/19 Contingency Plan Policy (UBIT HIPAA)
12/2/19 Data Backup Plan Policy (UBIT HIPAA)
12/2/19 Disaster Recovery Plan Policy (UBIT HIPAA)
12/2/19 Emergency Mode Operation Plan Policy (UBIT HIPAA)
12/2/19 Contingency Plan Testing and Revision Policy (UBIT HIPAA)
12/2/19 Application and Data Criticality Analysis Policy (UBIT HIPAA)
12/2/19 Evaluation Policy (UBIT HIPAA)
12/2/19 Business Associate Agreement Policy (UBIT HIPAA)
12/2/19 Facility Access Controls Policy (UBIT HIPAA)
12/2/19 Contingency Operations Policy (UBIT HIPAA)
12/2/19 Facility Security Plan Policy (UBIT HIPAA)
12/2/19 Access Control and Validation Procedures Policy (UBIT HIPAA)
12/2/19 Maintenance Records Policy (UBIT HIPAA)

12/2/19 Workstation Use Policy (UBIT HIPAA)
12/2/19 Workstation Security Policy (UBIT HIPAA)
12/2/19 Device and Media Controls Policy (UBIT HIPAA)
12/2/19 Disposal Policy (UBIT HIPAA)
12/2/19 Media Re-Use Policy (UBIT HIPAA)
12/2/19 Accountability Policy (UBIT HIPAA)
12/2/19 Data Backup and Storage Policy (UBIT HIPAA)
12/2/19 Access Control Policy (UBIT HIPAA)
12/2/19 Unique User Identification Policy (UBIT HIPAA)
12/2/19 Emergency Access Procedure Policy (UBIT HIPAA)
12/2/19 Automatic Logoff Policy (UBIT HIPAA)
12/2/19 Encryption and Decryption Policy (UBIT HIPAA)
12/2/19 Audit Controls Policy (UBIT HIPAA)
12/2/19 Integrity Policy (UBIT HIPAA)
12/2/19 Mechanism to Authenticate ePHI Policy (UBIT HIPAA)
12/2/19 Person or Entity Authentication Policy (UBIT HIPAA)
12/2/19 Transmission Security Policy (UBIT HIPAA)
12/2/19 Integrity Controls Policy (UBIT HIPAA)
12/2/19 Encryption Policy (UBIT HIPAA)
12/2/19 Business Associate Contracts or Other Arrangements Policy (UBIT HIPAA)
12/2/19 Business Associate Contracts Policy (UBIT HIPAA)
12/2/19 Other Arrangements Policy (UBIT HIPAA)
12/2/19 Policies and Procedures Policy (UBIT HIPAA)
12/2/19 Documentation Policy (UBIT HIPAA)
12/2/19 Time Limit Policy (UBIT HIPAA)
12/2/19 Availability Policy (UBIT HIPAA)
12/2/19 Updates Policy (UBIT HIPAA)
12/2/19 Notifications to Individuals Policy (UBIT HIPAA)
12/2/19 Timeliness of Notifications Policy (UBIT HIPAA)
12/2/19 Content of Notification Policy (UBIT HIPAA)
12/2/19 Methods of Individual Notification Policy (UBIT HIPAA)
12/2/19 Uses and Disclosures for which an Authorization is Required (UBIT HIPAA)
12/2/19 Document and Retention Policy (UBIT HIPAA)
12/2/19 HIPAA Procurement Policy

See also

Code of Federal Regulation, Title 45 Public Welfare, Part 164 Security and Privacy: HIPAA
HIPAA Definitions
NIST Glossary (PDF)
NYS Department of Health, HIPAA Preemption Charts (PDF)
UB HIPAA Research Homepage
US Department of Health & Human Services, Health Information Privacy
US Department of Health & Human Services, Office of Civil Rights, HIPAA Administrative Simplification Regulation Text 45 CFR Parts 160, 162, and 164 (PDF)

UBIT >
IT Policies >
Handling Restricted Data at UB >
UBIT Policy, HIPAA, FERPA and the Breach Notification Act >
UBIT HIPAA Policy

Help

11/19/19 UBIT Help Center
4/1/19 Getting Help from Your Department

Service Guides

7/13/17 New Student Video Tour
7/18/19 Accounts
6/28/19 Business
11/22/19 Computing Sites
11/13/19 Conference Technology
6/13/19 Connecting to the Internet and UB's Networks
3/27/19 Email
6/13/19 File Storage and Sharing
2/21/19 Hardware
5/15/19 Phones
5/20/19 Printing
9/17/19 Safe Computing
6/13/19 Software
11/1/18 Teaching Technology
10/2/19 Web Hosting

News and Alerts

1/16/19 All UBIT News
1/24/19 UBIT Newsletter Archive
4/1/19 UBIT Alerts
10/18/18 UBIT Blog

Service List

6/12/19 Services By Category
7/3/19 Services A-Z
6/19/19 Cost of Services

IT Policies

3/14/19 Official IT Policy Library
9/5/19 IT Guidance Documents & UBIT Policies
10/24/18 Handling Restricted Data at UB

About Us

10/25/18 Strategic Initiatives + Engagement
3/27/19 Governance and Advisory Groups
3/27/19 Our People
4/16/19 Service Metrics
7/6/17 UBIT Jobs

Forms

UBIT Help Center Online (login)

6/18/19 Request UBlearns Administrative Course Site
7/10/17 Request UBlearns Course Combination
7/10/17 Request a New Listserv List
7/10/17 Request to Delete a Listserv List
3/27/19 Request to Send Mass Email
2/1/18 Request or Renew Secure Server Certificate

Follow UBIT

UBIT News RSS

UBIT Blog RSS Feed

University at Buffalo. All rights reserved. | Privacy | Accessibility