HIPAA - Health Insurance Portability and Accountability Act

HIPAA Privacy Policies & Procedures

All of the policies below have been approved and may not be altered in any manner, except to customize the Procedure section for the respective departmental area. To customize the Procedure section, an attachment must be created and appended to the department's internal policy. The Procedure section is dependent upon each department's unique operating structure and should be customized accordingly.

Policies:

UPB HIPAA Policies
Policy Name	PDF
Accounting of Disclosures
Alcohol & Substance Abuse Information
Business Associates
Compliance & Enforcement
De-Identification of Information
Designated Record Sets
Facility Directory
Faxing Patient Information
Fundraising Activities
HIPAA Training
HIV Information
Mental Health Information
Minimum Necessary Guidelines
Notice of Privacy Practices
Patient Requests for Access
Patient Requests for Additional Privacy Protections
Patient Requests for Amendment
Personal Representatives
Privacy Rights of Minors
QA Records
Safeguards for Incidental Disclosures
Staff Confidentiality
Telephone Requests for Patient Information
Use of Limited Data Sets
Uses & Disclosures for Marketing Activities
Uses & Disclosures for Treatment, Payment & Healthcare Operations
Uses & Disclosures Not Requiring Patient Authorization
Uses & Disclosures of Decedent Information
Uses & Disclosures Requiring Patient Authorization
Uses & Disclosures to Individuals Involved in Care & for Notification Purposes
Verification of Identity

« Back to Top