HIPAA-covered Components

Boston University is a so-called “hybrid” HIPAA entity because only certain components of the University are covered by HIPAA, while the remainder of the University is not covered by HIPAA.

HIPAA-covered components of the University have been designated based on an assessment of

  • Functions of the components as healthcare providers or insurance plans and
  • Use of electronic transactions by the components.  On this basis, the Charles River Campus HIPAA-covered components have been designated. (See list below.)

Charles River Campus

HIPAA-covered Components
Component Name Address
Sargent College Rehabilitation Services 635 Commonwealth Avenue
The Danielsen Institute 185 Bay State Road
Boston University Health Plan Office Of Personnel, 25 Buick Street

Note:  Health information concerning students at Boston University Student Health Services is not covered by HIPAA, but rather is covered by the privacy protections of the Family Education Rights and Privacy Act and state law.

Oversight

Compliance with the HIPAA Privacy Rule for researchers’ access to protected health information on the Charles River Campus is overseen by the Records Administrators in the individual HIPAA-covered components on the Charles River Campus, who consult with the Privacy and Security Officers for the University.

Boston University Medical Campus

HIPAA-covered Components
Component Name Address
School of Dental Medicine Clinic 100 East Newton Street
Center for Human Genetics 700 Albany St.- Rm 408
Boston University Dental Health Plan 80 E. Concord Street Box 1000
Oversight

Compliance with the HIPAA Privacy Rule for researchers’ access to protected health information on the Boston University Medical Campus is overseen initially by the BUMC Institutional Review Board. For more information, visit the BUMC HIPAA website.

Secondarily, compliance with the HIPAA Privacy Rule by researchers is overseen for:

  • University HIPAA-covered components, by the Records Administrators in the individual HIPAA-covered components on the BUMC, who consult with the Privacy and Security Officers for the University.
  • Boston Medical Center, the principal affiliated teaching hospital of the BU School of Medicine, by the Boston Medical Center Privacy Officer:

Ron Barnes
Boston Medical Center HIPAA Privacy and Security Officer
617-414-8539
ron.barnes@bmc.org

Also see