HIPAA at Boston University

Welcome to BU’s HIPAA and Health Information Privacy resources site.

This site contains information for BU’s HIPAA Covered Components and HIPAA Covered Health Plans on how to comply with HIPAA. It is also a helpful resource for members of the BU community who provide services to or otherwise support the Covered Components.

Please click on “Policies for BU Health care Providers” to find BU’s University-wide HIPAA policies. Other pages on this site contain forms for each Covered Component, training materials and other helpful information.

NOTE: If you are a patient of a BU health care provider and wish to understand your privacy rights, please talk to your provider, or visit the provider’s website. Not all of BU health care providers are subject to HIPAA, but all respect the privacy of your individually identifiable health information as a matter of state law, professional ethics and BU policy.

Certain operational units at BU are subject to HIPAA:

  • The BU Health Plans (health insurance, dental insurance and flexible benefit plans for BU employees and their dependents)
  • The following BU Health Care Providers, which have been designated as HIPAA-Covered Components:
    1. The Albert & Jessie Danielsen Institute at Boston University,
    2. Boston University Rehabilitation Services (including the BU Physical Therapy Center and BU Center for Neurorehabilitation),
    3. Sargent Choice Nutrition Center,
    4. Henry M. Goldman School of Dental Medicine Patient Treatment Centers,
    5. BU Dental Health Center, and
    6. Boston University Student Health Services (Student Health Services qualifies as a Covered Component because it engages in electronic transactions. However, its records are either Education Records or Treatment Records under FERPA and so are not subject to HIPAA’s Privacy and Security rules or the policies found on this website).
  • BU’s Designation of Covered Components is found here
👥

BU HIPAA Privacy and Security Officers

BU HIPAA Privacy Officer: Diane Lindquist dlindq@BU.edu
Security Officer: David Corbett corbettd@BU.edu

Questions about HIPAA?

Please explore this site but if you don’t find the information you need here, email HIPAA@BU.edu for quick answers.

👤

HIPAA Contacts

Link to the BU HIPAA Sharepoint Site https://bushare.sharepoint.com/sites/HIPAA/components/SitePages/Home.aspx.

📞

Report a possible breach

The Incident Response Team receives reports of potential HIPAA breaches and you can email them directly at irt@bu.edu.
Report a potential breach

If you have reason to believe that violations of BU policy or improper conduct has occurred, please visit the Compliance site for information on the various ways to report your concern.