Skip to page content



GUIDANCE

Reference materials and guidance documents are available for your use. 

If you have questions about any of the guidance documents or do not see your question in the materials below, please contact the Privacy Program at:
 773-834-9716 or hpo@bsd.uchicago.edu.

For information on HIPAA Privacy and Security training click here.

Accessing PHI
Accessing Your Own Personal Health Information
Snooping

Accounting for Disclosures
Accounting of Disclosures Definition Table
Tracking EPIC Quick Disclosure
Recording an EPIC Quick Disclosure
Locating a Quick Disclosure in EPIC


Allergy Information
Posting Allergy Information

Amending A Patient Medical Record
Amending A Patient Medical Record
Request for Amendment of PHI Form

Authorizations
Patient Authorization

Business Associates
 
Guidance to determine when a third party is a Business Associate 
 Checklist to determine when a third party is a Business Associate
 WEDI HIPAA/HITECH Business Associate Decision Tree

Coworkers
When a Coworker is a Patient

Code of Conduct
Code of Conduct

Data Guardian Program
UCM Data Guardian Program

Disposal of PHI
Proper Disposal of Protected Health Information

De-Identification
Guidance on De-identification Under HIPAA

Education
Use of Protected Health Information in Education
 
Email
Email Communications
Secure Email Gateway
How to Access UCM Encrypted Email

Family Members
Communication When Family Members or Visitors Are Present

Faxing
Faxing Patient Information

Fundraising
Fundraising

Highly Confidential Information
Highly Confidential Information

HIPAA - General
HIPAA Tips for Protecting Privacy and Security
HIPAA Reference Sheet 
HIPAA Tips: Staff Guide to HIPAA Privacy and Security

House Phones
House Phones 

Incidential Disclosures

Incidental Disclosures of Protected Health Information (PHI) 

Insurance
Disclosures to Insurance Companies

Law Enforcement
Law Enforcement Access to Patients and Information
Verification of Law Enforcement's Immediate Need of Information About a Patient Victim
Law Enforcement Official's Request for Protected Health Information

Medical Records
Medical Records Request - Overview
Medical Records
Request and Authorization to Copy Health Information Form
Instructions for Completing Request and Authorization to Copy Health Information

Minors
When A Minor Is Not Considered A "Minor" 

Notice of Privacy Practices
Notice of Privacy Practices - Overview
FAQs
Notice of Privacy Practices - Acknowledgement 
Notice of Privacy Practices - in English
Notice of Privacy Practices - in Espanol 
Notice of Privacy Practices - in Arabic

Passwords
Passwords

Patient Access Code
Inpatient Information Access Code

Publications
Use of Protected Health Information (PHI) in Publications

Questions About a Patient
Inpatient Information Access Code

Releasing PHI
Releasing Protected Health Information
Request and Authorization to Copy Health Information Form
Instructions for Completing Request and Authorization to Copy Health Information

Research
Research

Scheduling and Confirming Patient Appointments
Scheduling and Confirming Patient Appointments

Snooping
Snooping

Transporting Medical Records
Transporting Medical Records and PHI

Vendors
Vendors
 
Voice Messages, Telephone and Mail
Use and Disclose of PHI In Telephone, Voice Messages and Mail

Workers Compensation
Disclosing Information for Workers Compensation and Employee Based Programs