Skip to Content

Office of the VPCIO

University at Buffalo (UB)

Office of the VPCIO

UB Information Technology

5/23/24 Services
6/3/24 News and Alerts
5/13/24 IT Policies
8/18/23 About Us

5/23/24 Services
6/3/24 News and Alerts
5/13/24 IT Policies
8/18/23 About Us

Search

New to UB
Students
Faculty
Staff
IT staff
VPCIO staff
Former UB

UBIT >
IT Policies >
Handling Restricted Data at UB >
UBIT Policy, HIPAA, FERPA and the Breach Notification Act >
UBIT HIPAA Policy

UBIT HIPAA Policy

Learn how UB Information Technology complies with the Health Insurance Portability and Accountability Act of 1996 (HIPAA).

Contents

12/2/19 Protected Health Information Security Policy (UBIT HIPAA)
11/9/22 Protected Health Information Security Sanction Policy (UBIT HIPAA)
12/2/19 Security Management Process Policy (UBIT HIPAA)
12/2/19 Risk Analysis Policy (UBIT HIPAA)
12/2/19 Risk Management Policy (UBIT HIPAA)
12/2/19 Information System Activity Review Policy (UBIT HIPAA)
12/2/19 Assigned Workforce Security Responsibility Policy (UBIT HIPAA)
12/2/19 Workforce Security Policy (UBIT HIPAA)
12/2/19 Authorization and/or Supervision Policy (UBIT HIPAA)
12/2/19 Workforce Clearance Policy (UBIT HIPAA)
12/2/19 Termination Procedures Policy (UBIT HIPAA)
12/2/19 Information Access Management Policy (UBIT HIPAA)
12/2/19 Access Authorization Policy (UBIT HIPAA)
12/2/19 Access Establishment and Modification Policy (UBIT HIPAA)
12/2/19 Security Awareness and Training Policy (UBIT HIPAA)
12/2/19 Access Security Reminders Policy (UBIT HIPAA)
12/2/19 Protection from Malicious Software Policy (UBIT HIPAA)
12/2/19 Log-in Monitoring Policy (UBIT HIPAA)
12/2/19 Password Management Policy (UBIT HIPAA)
12/2/19 Addressing Security Incidents Policy (UBIT HIPAA)
12/2/19 Identifying and Responding to Security Incidents Policy (UBIT HIPAA)
12/2/19 Contingency Plan Policy (UBIT HIPAA)
12/2/19 Data Backup Plan Policy (UBIT HIPAA)
11/15/22 Disaster Recovery Plan Policy (UBIT HIPAA)
12/2/19 Emergency Mode Operation Plan Policy (UBIT HIPAA)
12/2/19 Contingency Plan Testing and Revision Policy (UBIT HIPAA)
12/2/19 Application and Data Criticality Analysis Policy (UBIT HIPAA)
12/2/19 Evaluation Policy (UBIT HIPAA)
12/2/19 Business Associate Agreement Policy (UBIT HIPAA)
12/2/19 Facility Access Controls Policy (UBIT HIPAA)
12/2/19 Contingency Operations Policy (UBIT HIPAA)
12/2/19 Facility Security Plan Policy (UBIT HIPAA)
12/2/19 Access Control and Validation Procedures Policy (UBIT HIPAA)
11/16/22 Maintenance Records Policy (UBIT HIPAA)

12/2/19 Workstation Use Policy (UBIT HIPAA)
12/2/19 Workstation Security Policy (UBIT HIPAA)
12/2/19 Device and Media Controls Policy (UBIT HIPAA)
11/16/22 Disposal Policy (UBIT HIPAA)
12/2/19 Media Re-Use Policy (UBIT HIPAA)
12/2/19 Accountability Policy (UBIT HIPAA)
12/2/19 Data Backup and Storage Policy (UBIT HIPAA)
12/2/19 Access Control Policy (UBIT HIPAA)
12/2/19 Unique User Identification Policy (UBIT HIPAA)
12/2/19 Emergency Access Procedure Policy (UBIT HIPAA)
12/2/19 Automatic Logoff Policy (UBIT HIPAA)
12/2/19 Encryption and Decryption Policy (UBIT HIPAA)
12/2/19 Audit Controls Policy (UBIT HIPAA)
12/2/19 Integrity Policy (UBIT HIPAA)
12/2/19 Mechanism to Authenticate ePHI Policy (UBIT HIPAA)
12/2/19 Person or Entity Authentication Policy (UBIT HIPAA)
12/2/19 Transmission Security Policy (UBIT HIPAA)
12/2/19 Integrity Controls Policy (UBIT HIPAA)
12/2/19 Encryption Policy (UBIT HIPAA)
12/2/19 Business Associate Contracts or Other Arrangements Policy (UBIT HIPAA)
12/2/19 Business Associate Contracts Policy (UBIT HIPAA)
12/2/19 Other Arrangements Policy (UBIT HIPAA)
12/2/19 Policies and Procedures Policy (UBIT HIPAA)
12/2/19 Documentation Policy (UBIT HIPAA)
12/2/19 Time Limit Policy (UBIT HIPAA)
12/2/19 Availability Policy (UBIT HIPAA)
12/2/19 Updates Policy (UBIT HIPAA)
12/2/19 Notifications to Individuals Policy (UBIT HIPAA)
12/2/19 Timeliness of Notifications Policy (UBIT HIPAA)
12/2/19 Content of Notification Policy (UBIT HIPAA)
12/2/19 Methods of Individual Notification Policy (UBIT HIPAA)
11/15/22 Uses and Disclosures for which an Authorization is Required (UBIT HIPAA)
12/2/19 Document and Retention Policy (UBIT HIPAA)
12/2/19 HIPAA Procurement Policy

See also

Code of Federal Regulation, Title 45 Public Welfare, Part 164 Security and Privacy: HIPAA
HIPAA Definitions
NIST Glossary (PDF)
NYS Department of Health, HIPAA Preemption Charts (PDF)
UB HIPAA Research Homepage
US Department of Health & Human Services, Health Information Privacy
US Department of Health & Human Services, Office of Civil Rights, HIPAA Administrative Simplification Regulation Text 45 CFR Parts 160, 162, and 164 (PDF)

UBIT >
IT Policies >
Handling Restricted Data at UB >
UBIT Policy, HIPAA, FERPA and the Breach Notification Act >
UBIT HIPAA Policy

Help

12/19/24 UBIT Help Center
11/3/22 Getting Help from Your Department
12/12/24 Safe Computing

3/11/24 New to UB
8/21/24 Student service guides
9/30/24 Faculty service guides
11/20/24 Staff service guides

5/20/24 Services A-Z
12/4/24 Cost of Services

News and Alerts

5/31/24 All UBIT News
5/23/24 UBIT Alerts
8/25/23 UBIT Blog
8/6/24 UB Tech Talk Video Podcast

About Us

8/20/24 Strategic Initiatives + Engagement
10/17/22 Governance and Advisory Groups
3/27/19 Our People
12/21/20 UBIT Jobs

Forms

12/3/24 Submit a Ticket
Request UB Learns Course Combination
Request UB Learns Administrative Course Site
12/3/24 Request to Send Mass Email
12/30/22 Request to Delete a Listserv List
12/30/22 Request a New Listserv List
10/11/24 MyUB Contact
7/19/22 Level Up Space Use Request

IT Policies

6/16/20 Official IT Policy Library
5/13/24 IT Guidance Documents & UBIT Policies
10/24/18 Handling Restricted Data at UB

Follow UBIT

UBIT on X (Formerly known as Twitter)

Send corrections to ubit-communication@buffalo.edu

University at Buffalo. All rights reserved. | Privacy | Accessibility

Your Privacy is Important To Us.

Buffalo.edu uses cookies to help build a better website experience for our visitors. Learn more in our Privacy Policy