HIPAA - 42 Resources

Overview
Publications (23)
Presentations (15)
Policies (6)
Podcasts (1)
Blogs (3)

Overview

HIPAA - Health Insurance Portability and Accountability Act of 1996

The privacy provisions of the federal law, the Health Insurance Portability and Accountability Act of 1996 (HIPAA), apply to health information created or maintained by health care providers who engage in certain electronic transactions, health plans, and health care clearinghouses.

Note: HIPAA privacy standards became effective in April 2003 and the HIPAA security standards will go into effect April 21, 2005.

EDUCAUSE has identified links concerning HIPAA that may be useful to the higher education community. Many of these links have been contributed by EDUCAUSE members. If you have additional resources you would like to include on this page, send the information to: contribute@educause.edu

Federal Government Resources

HIPAA Security Standards
Health Insurance Reform: Security Standards; Final Rule. February 20, 2003.

HIPAA Privacy Standards
Standards for Privacy of Individually Identifiable Health Information; Final Rule. August 14, 2002.

Health Insurance Portability and Accountability Act of 1996 (HIPAA)
Public Law 104-191, passed by the 104th Congress

Office for Civil Rights - HIPAA
The privacy provisions of the federal law, the Health Insurance Portability and Accountability Act of 1996 (HIPAA), apply to health information created or maintained by health care providers who engage in certain electronic transactions, health plans, and health care clearinghouses.

Centers for Medicare & Medicaid Services
(CMS) Centers for Medicare & Medicaid Services is responsible for implementing various unrelated provisions of HIPAA. This page contains a directory of CMS's business activities with regard to HIPAA.
Press Release - CMS Named to Enforce HIPAA Transaction and Code Set Standards 10/15/02

Non-governmental Organizations Resources

Expert HIPAA Compliance Solutions
This site offers a HIPAA compliance discussion area, news updates, a weekly newsletter, links to resources, readiness checklists, and information for health care providers and employers.

Guidelines for Academic Medical Centers on Security and Privacy
Association of American Medical Colleges' Guidelines for Academic Medical Centers on Security and Privacy. This site offers practical strategies for addressing the Health Insurance Portability and Accountability Act (HIPAA).

HIPAA.ORG
A collection of miscellaneous HIPAA links. Categories include laws, identifiers, transactions, enforcement, security, privacy, codes and discussion groups.

HIPAAcomply
This site includes information on HIPAA news, timeline, discussion lists, events, legislation and technology.

HIPAAdvisory
This site includes information regarding HIPAA regulations, news updates, white papers, discussion lists and FAQs.

Implementation Guides Adopted for use under HIPAA
Washington Publishing Company (WPC) specializes in managing and distributing Electronic Data Interchange (EDI) information, primarily in the form of documentation for organizations that develop, maintain, and implement EDI standards.

InfoShare HIPAA Information
InfoShare is concerned primarily with the research implications of the privacy regulations.

ReadyforHIPAA.com
The ReadyforHIPAA.com web site is intended primarily for IT professionals in search of information and resources on the issues involved with complying with HIPAA regulations.

Strategic National Implementation Process
HIPAA resources include transactions code sets and standards and HIPAA vendor solutions

Universities and HIPAA

Publications (23)

EDUCAUSE publications address a diverse range of professional challenges in higher education IT, from updates on current developments to explorations of important overarching issues. Listed below are the full range of research, reports and other publications that EDUCAUSE and its members have written about HIPAA.

Item ID	Title	Resource Category	Pub Date	Views
ERB0922	Privacy and Confidentiality: Holding IT Service Providers Accountable Nadine Stern Articles, Papers, and Reports	ECAR	11/03/2009	594
ERS0903	Information Confidentiality Trent Henry Articles, Papers, and Reports	ECAR	03/11/2009	1,984
CSD5578	Joint Guidance on the Application of the Family Educational Rights and Privacy Act (FERPA) And the Health Insurance Portability and Accountability Act of 1996 (HIPAA) To Student Health Records Government Documents, Laws, Testimonies or Reports	Community Recommendation	12/04/2008	567
ERM0362	Civil Privacy and National Security Legislation: A Three-Dimensional View Tracy Mitrano Articles, Papers, and Reports	EDUCAUSE Review	01/01/2003	8,711
ERM0653	A Unified Approach to Information Security Compliance M. Peter Adler Articles, Papers, and Reports	EDUCAUSE Review	01/01/2006	11,395
ERB0808	Regulatory Compliance Training: Public Jobs, Private Data Ross T. Janssen and Greg C. Sales Articles, Papers, and Reports	ECAR	04/15/2008	2,486
ERB0307	Life with HIPAA: A Primer for Higher Education Toby D. Sitko, Norma Kenigsberg, Marilyn A. McMillan, and Pietrina Scaraglino Articles, Papers, and Reports	ECAR	04/01/2003	8,112
ERB0414	Leveraging IT Infrastructure for HIPAA Training Ross T. Janssen and John Jensen Articles, Papers, and Reports	ECAR	07/06/2004	6,080
ERB0425	A Framework for HIPAA IT Security Compliance: Leveraging for Security Norma K. S. Kenigsberg, Kenneth M. Fauerbach, and Marilyn A. McMillan Articles, Papers, and Reports	ECAR	12/07/2004	4,710
CSD3065	HIPAA Risk Assessment Inventory Workbook Articles, Papers, and Reports	Security Task Force	01/01/2004	5,050
CSD4917	Privacy vs. Security Elia Powers Articles, Papers, and Reports	Community Recommendation	01/01/2007	1,615
CSD4940	University Campus Safety Final Report Articles, Papers, and Reports	Community Recommendation	01/01/2007	1,795
EPS248	HIPAA Security Assessment Eric Schmidt Effective Practices	Community Recommendation	01/01/2004	1,423
CSD4973	Fuzzy Understandings of FERPA Elizabeth Redden Articles, Papers, and Reports	Community Recommendation	06/15/2007	1,865
CSD4978	Report to the President on Issues Raised by the Virginia Tech Tragedy Government Documents, Laws, Testimonies or Reports	Community Recommendation	06/13/2007	2,373
CSD5096	Report of the Virginia Tech Review Panel Articles, Papers, and Reports	Community Recommendation	08/31/2007	3,064
CSD5128	Information Security and Data Breach Notification Safeguards Gina M. Stevens Government Documents, Laws, Testimonies or Reports	Community Recommendation	07/31/2007	2,859
CSD3784	Privacy & Compliance: Better Safe Than Sorry Kent Wada Articles, Papers, and Reports	Community Recommendation	01/01/2005	3,025
ERM0159	HIPAA and Higher Education C.W. Goldsmith Articles, Papers, and Reports	EDUCAUSE Review	01/01/2001	4,600
NET0301	Privacy Articles, Papers, and Reports	EDUCAUSE Policy Office	01/01/2005	4,544
CSD2950	Creighton University: Researchers Comply with HIPAA Using PKZIP Articles, Papers, and Reports	Community Recommendation	01/01/2003	3,599
CSD3247	HIPAA Security Standards Government Documents, Laws, Testimonies or Reports	Community Contributions	01/01/2003	3,078
CSD5741	Forward Into the Cloud Steve Kolowich Articles, Papers, and Reports	Community Contributions	09/30/2009	44

Presentations (15)

Stepping away from the distractions of normal routine to meet with peers, share experiences, and learn together can be invaluable. EDUCAUSE places great emphasis on the face-to-face meeting experience, offering you numerous opportunities throughout the year to gather with colleagues - from small regional events and special topic meetings to large, national conferences covering the full spectrum of roles and issues important to higher education. For more information on EDUCAUSE conferences and seminars, please see our Frequently Asked Questions page. Listed below is the full range of presentations EDUCAUSE and its members tagged with HIPAA

Item ID	Title	Resource Category	Pub Date	Views
NC09_48316	Ferreting Out Sensitive Data Antwon Ward and Allison F. Dolan Presentations/Speeches	NERCOMP	03/10/2009	596
NET0013	HIPAA and FERPA (or Is Your HIPAA Eating Your FERPA?) C.W. Goldsmith Presentations/Speeches	EDUCAUSE Policy Office	01/01/2001	7,486
CMR0405	IT Legislation: How It Impacts Higher Education and Why You Should Care Judith B. Caruso Presentations/Speeches	CUMREC (Archives)	01/01/2004	5,158
EDU0243	From Toys to Mobile Tools: PDAs in Medical School--Tackling Confidentiality Sharon Collins, Julius Q. Mallette and Susan Thornton Presentations/Speeches	EDUCAUSE Annual	01/01/2002	6,003
MAC0422	Information Privacy: Public Policy and Institutional Policies Rodney J. Petersen and Wendy Wigen Presentations/Speeches	Mid-Atlantic Regional	01/01/2004	5,522
SEC0308	Legal Issues in Computer and Network Security Peter Cassat Presentations/Speeches	Security Task Force	01/01/2003	7,833
SEC07074	Roundup of Legal Developments in Cybersecurity and Privacy Law M. Peter Adler Presentations/Speeches	Security Professionals Conference	04/11/2007	1,838
SER0408	The Building Blocks for Security at Emory University Jay Flanagan Presentations/Speeches	Southeast Regional	01/01/2004	4,774
EAF0515	Identity and Access Management for HIPAA: Technology Model William Weems Presentations/Speeches	EDUCAUSE Grant Programs (CAMP)	02/10/2005	3,010
EAF0516	Supporting Virtual Organizations: Leveraging Local Identity Management Infrastructures Kenneth J. Klingenstein Presentations/Speeches	EDUCAUSE Grant Programs (CAMP)	02/10/2005	3,067
EDU0263	Achieving and Sustaining HIPAA Compliance Melissa Glynn and David G. Swartz Presentations/Speeches	EDUCAUSE Annual	01/01/2002	5,665
SEC0404	Effective Security Practices Eoghan Casey and Jack Suess Presentations/Speeches	Mid-Atlantic Regional	01/01/2004	4,203
EAF0507	Building a Health Information Infrastructure to Support HIPAA Richard Konopacki and Gary DeClute Presentations/Speeches	EDUCAUSE Grant Programs (CAMP)	02/10/2005	3,091
LIVE0524	HIPAA Privacy and Security for Academic Institutions Brian D. Gradle Presentations/Speeches	Web Seminars EDUCAUSE	01/01/2005	2,664
EAF0514	Management and Policy: Mapping HIPAA to the Middleware Layer Sandra Senti Presentations/Speeches	EDUCAUSE Grant Programs (CAMP)	02/10/2005	2,837

Policies (6)

Item ID	Title	Resource Category	Pub Date	Views
CSD4456	RIT Information Security Policy Policies and Procedures	Community Recommendation	01/01/2006	1,857
CSD3886	Stanford Data Classification Guidelines and Classification of Data Policies and Procedures	Community Recommendation	03/20/2006	3,071
CSD3525	UF Guidelines to Develop Applications for Secure Deployment Policies and Procedures	Community Recommendation	01/01/2004	2,936
CSD3639	Administration & Oversight for Protection of Individual Health Information (HIPAA) Policies and Procedures	Community Recommendation	01/01/2004	2,603
CSD3640	Use & Disclosure of Individual Health Information for Research Purposes (HIPAA) Policies and Procedures	Community Recommendation	01/01/2004	2,419
CSD3641	Protection of Individual Health Information by University Health Care Components (HIPAA) Policies and Procedures	Community Recommendation	01/01/2004	2,589

Podcasts (1)

Name	Views	Post date
E2005 Podcast: Electronic Collaboration with Academic Medical Centers Play \| Show Notes \| Download (11.94 MB audio/mpeg)	3,263	02/13/2006

Blogs (3)

EDUCAUSE hosts a number of blogs for its members. To view a list of all our blogs, click here.

Title	Blogger	Posted	Views
NACUA Virtual Seminar on HIPAA and the HITECH Act: New Compliance Obligations for Colleges and Universities	Valerie M. Vogel, EDUCAUSE	07/20/2009	199
EDUCAUSE Security Professionals Conference 2006.Summary: Implementing HIPAA Security Rule Training Program for Sys Admins at ECU	Lida L. Larsen, EDUCAUSE	04/25/2006	3,769
ECAR Research Study on HIPAA Training Now Publicly Available	Valerie M. Vogel, EDUCAUSE	01/31/2006	4,141

Do you have a great resource that should be listed here? Email contribute@educause.edu with your recommendation!