Protected Health Information - HIPAA for BU Healthcare

• Guide

  Guidance on Data Security for Boston University Medical Campus Researchers

  Responsible Office(s): Research Compliance
• Policy

  HIPAA Health Care Providers Policies Appendix A: Contacts

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 01/19/2024
• Policy

  HIPAA Policies for BU HIPAA Components: Policy 1, HIPAA Basics

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 07/23/2026
• Policy

  HIPAA Policies for BU HIPAA Components: Policy 8, HIPAA Security Program

  Responsible Office(s): Information Security

  Last Modified: 12/18/2025
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Introduction – HIPAA at Boston University

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 11/01/2018
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 10, Documentation and Retention

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 03/11/2025
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 11, Exceptions

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 11/01/2018
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 12, Definitions

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 11/01/2018
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 2, Individual Responsibilities for Safeguarding PHI

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 09/20/2024
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 3 – Using PHI in Treatment, for Payment and for Health Care Operations; Business Associates

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 11/26/2024
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 4, Uses Required or Permitted by Law; Prohibited Uses of PHI

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 11/01/2018
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 5, Situations in which Authorizations and Attestations are Necessary

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 12/10/2024
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 6, Individuals’ Rights under HIPAA

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 03/30/2026
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 7, Breaches

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 03/11/2025
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 9, Enforcement and Sanctions

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy | Research Compliance
• Policy

  HIPAA Policy Manual – Privacy and Security of Protected Health Information for BU HIPAA Components

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 12/11/2025
• Resource

  Medical Records and Health Information Guidance