Protected Health Information - HIPAA

• Policy

  BU Research Compliance Policy on Acquisition and Documentation of Post-Mortem Human Samples

  Responsible Office(s): Research Compliance
• Guide

  Guidance on Data Security for Boston University Medical Campus Researchers

  Responsible Office(s): Research Compliance

Healthcare

• Policy

  HIPAA Health Care Providers Policies Appendix A: Contacts

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 01/19/2024
• Guide

  HIPAA Information for Charles River Campus Researchers

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy
• Policy

  HIPAA Policies for BU Health Plans Manual – Privacy and Security of Protected Health Information for BU Health Plans

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 03/11/2025
• Policy

  HIPAA Policies for BU Health Plans: Appendix A, Contacts

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy
• Policy

  HIPAA Policies for BU Health Plans: Introduction, HIPAA and the Boston University Health Plans

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy
• Policy

  HIPAA Policies for BU Health Plans: Policy 1, Basics

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy
• Policy

  HIPAA Policies for BU Health Plans: Policy 10, Definitions

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy
• Policy

  HIPAA Policies for BU Health Plans: Policy 2: Individual Responsibilities for Safeguarding PHI

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy
• Policy

  HIPAA Policies for BU Health Plans: Policy 3, Routine Use and Disclosure of PHI

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy
• Policy

  HIPAA Policies for BU Health Plans: Policy 4, Non-Routine Uses and Disclosures of PHI without Authorization; Prohibited Uses

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy
• Policy

  HIPAA Policies for BU Health Plans: Policy 5, Authorizations

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy
• Policy

  HIPAA Policies for BU Health Plans: Policy 6, Individuals’ Rights Under HIPAA

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy
• Policy

  HIPAA Policies for BU Health Plans: Policy 7, Breaches

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 03/11/2025
• Policy

  HIPAA Policies for BU Health Plans: Policy 8, Security Policy

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy
• Policy

  HIPAA Policies for BU HIPAA Components: Policy 1, HIPAA Basics

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 07/23/2026
• Policy

  HIPAA Policies for BU HIPAA Components: Policy 8, HIPAA Security Program

  Responsible Office(s): Information Security

  Last Modified: 12/18/2025
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Introduction – HIPAA at Boston University

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 11/01/2018
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 10, Documentation and Retention

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 03/11/2025
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 11, Exceptions

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 11/01/2018
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 12, Definitions

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 11/01/2018
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 2, Individual Responsibilities for Safeguarding PHI

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 09/20/2024
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 3 – Using PHI in Treatment, for Payment and for Health Care Operations; Business Associates

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 11/26/2024
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 4, Uses Required or Permitted by Law; Prohibited Uses of PHI

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 11/01/2018
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 5, Situations in which Authorizations and Attestations are Necessary

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 12/10/2024
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 6, Individuals’ Rights under HIPAA

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 03/30/2026
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 7, Breaches

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 03/11/2025
• Policy

  HIPAA Policy Manual – Privacy and Security of Protected Health Information for BU HIPAA Components

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 12/11/2025
• Resource

  Medical Records and Health Information Guidance
• Policy

  Section 1557 Effective Communication Policy

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy
• Policy

  Section 1557 Grievance Policy

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy
• Policy

  Section 1557 Language Access Policy

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy

  Last Modified: 12/12/2025
• Policy

  Section 1557 Nondiscrimination Policy

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy
• Policy

  Section 1557 Policies Manual

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy
• Policy

  Section 1557 Reasonable Modification Policy

  Responsible Office(s): Office of Healthcare Compliance and Health Information Privacy