SUNY Downstate Medical Center

The purpose of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) is to improve the efficiency and effectiveness of the healthcare system by standardizing the electronic exchange of administrative and financial data and to protect the security and privacy of protected health information (PHI). As a healthcare provider who conducts transactions electronically, SUNY Downstate Medical Center is considered a covered entity under the rule and required by federal law to implement these standards and regulations.

The regulations are comprised of three essential areas:

• Privacy - Oversight Responsibility: Office of Compliance & Audit Services, (718) 270-4033/2095
• Transaction & Code Sets - Oversight Responsibility: Hospital Finance, (718) 826-4900
• Security - Oversight Responsibility: Information Services, (718) 270-2431