HIPAA - 8 Resources

Overview
Publications (4)
Policies (6)
Podcasts (1)
Blogs (3)

Overview

HIPAA - Health Insurance Portability and Accountability Act of 1996

The privacy provisions of the federal law, the Health Insurance Portability and Accountability Act of 1996 (HIPAA), apply to health information created or maintained by health care providers who engage in certain electronic transactions, health plans, and health care clearinghouses.

Note: HIPAA privacy standards became effective in April 2003 and the HIPAA security standards will go into effect April 21, 2005.

EDUCAUSE has identified links concerning HIPAA that may be useful to the higher education community. Many of these links have been contributed by EDUCAUSE members. If you have additional resources you would like to include on this page, send the information to: contribute@educause.edu

Federal Government Resources

HIPAA Security Standards
Health Insurance Reform: Security Standards; Final Rule. February 20, 2003.

HIPAA Privacy Standards
Standards for Privacy of Individually Identifiable Health Information; Final Rule. August 14, 2002.

Health Insurance Portability and Accountability Act of 1996 (HIPAA)
Public Law 104-191, passed by the 104th Congress

Office for Civil Rights - HIPAA
The privacy provisions of the federal law, the Health Insurance Portability and Accountability Act of 1996 (HIPAA), apply to health information created or maintained by health care providers who engage in certain electronic transactions, health plans, and health care clearinghouses.

Centers for Medicare & Medicaid Services
(CMS) Centers for Medicare & Medicaid Services is responsible for implementing various unrelated provisions of HIPAA. This page contains a directory of CMS's business activities with regard to HIPAA.
Press Release - CMS Named to Enforce HIPAA Transaction and Code Set Standards 10/15/02

Non-governmental Organizations Resources

Expert HIPAA Compliance Solutions
This site offers a HIPAA compliance discussion area, news updates, a weekly newsletter, links to resources, readiness checklists, and information for health care providers and employers.

Guidelines for Academic Medical Centers on Security and Privacy
Association of American Medical Colleges' Guidelines for Academic Medical Centers on Security and Privacy. This site offers practical strategies for addressing the Health Insurance Portability and Accountability Act (HIPAA).

HIPAA.ORG
A collection of miscellaneous HIPAA links. Categories include laws, identifiers, transactions, enforcement, security, privacy, codes and discussion groups.

HIPAAcomply
This site includes information on HIPAA news, timeline, discussion lists, events, legislation and technology.

HIPAAdvisory
This site includes information regarding HIPAA regulations, news updates, white papers, discussion lists and FAQs.

Implementation Guides Adopted for use under HIPAA
Washington Publishing Company (WPC) specializes in managing and distributing Electronic Data Interchange (EDI) information, primarily in the form of documentation for organizations that develop, maintain, and implement EDI standards.

InfoShare HIPAA Information
InfoShare is concerned primarily with the research implications of the privacy regulations.

ReadyforHIPAA.com
The ReadyforHIPAA.com web site is intended primarily for IT professionals in search of information and resources on the issues involved with complying with HIPAA regulations.

Strategic National Implementation Process
HIPAA resources include transactions code sets and standards and HIPAA vendor solutions

Universities and HIPAA

Publications (4)

EDUCAUSE publications address a diverse range of professional challenges in higher education IT, from updates on current developments to explorations of important overarching issues. Listed below are the full range of research, reports and other publications that EDUCAUSE and its members have written about HIPAA.

Item ID	Title	Pub Date	Views
ERB0922	Privacy and Confidentiality: Holding IT Service Providers Accountable	11/03/2009	609
ERB0808	Regulatory Compliance Training: Public Jobs, Private Data	04/15/2008	2,488
CSD5741	Forward Into the Cloud	09/30/2009	46
CSD3247	HIPAA Security Standards	01/01/2003	3,078

Policies (6)

Item ID	Title	Resource Category	Pub Date	Views
CSD4456	RIT Information Security Policy Policies and Procedures	Community Recommendation	01/01/2006	1,858
CSD3886	Stanford Data Classification Guidelines and Classification of Data Policies and Procedures	Community Recommendation	03/20/2006	3,071
CSD3641	Protection of Individual Health Information by University Health Care Components (HIPAA) Policies and Procedures	Community Recommendation	01/01/2004	2,590
CSD3640	Use & Disclosure of Individual Health Information for Research Purposes (HIPAA) Policies and Procedures	Community Recommendation	01/01/2004	2,419
CSD3639	Administration & Oversight for Protection of Individual Health Information (HIPAA) Policies and Procedures	Community Recommendation	01/01/2004	2,603
CSD3525	UF Guidelines to Develop Applications for Secure Deployment Policies and Procedures	Community Recommendation	01/01/2004	2,936

Podcasts (1)

Name	Views	Post date
E2005 Podcast: Electronic Collaboration with Academic Medical Centers Play \| Show Notes \| Download (11.94 MB audio/mpeg)	3,263	02/13/2006

Blogs (3)

EDUCAUSE hosts a number of blogs for its members. To view a list of all our blogs, click here.

Title	Blogger	Posted	Views
NACUA Virtual Seminar on HIPAA and the HITECH Act: New Compliance Obligations for Colleges and Universities	Valerie M. Vogel, EDUCAUSE	07/20/2009	203
EDUCAUSE Security Professionals Conference 2006.Summary: Implementing HIPAA Security Rule Training Program for Sys Admins at ECU	Lida L. Larsen, EDUCAUSE	04/25/2006	3,770
ECAR Research Study on HIPAA Training Now Publicly Available	Valerie M. Vogel, EDUCAUSE	01/31/2006	4,142

Do you have a great resource that should be listed here? Email contribute@educause.edu with your recommendation!