Administrative

PROTECTION OF INDIVIDUAL HEALTH INFORMATION

Adopted: February 14, 2003; March 13, 2009

UNIVERSITY OF MINNESOTA

BOARD OF REGENTS POLICY

Page 1 of 1

PROTECTION OF INDIVIDUAL HEALTH INFORMATION

Subd. 1. Policy Statement. It is the policy and practice of the University of Minnesota (University) that individually identifiable health information gathered:

(a) in the course of research conducted at the University; or

(b) through the provision of health care by the University; or

(c) in the course of health plan administration at the University

shall be protected in accordance with applicable state and federal law, including, but not limited to, the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations.

Subd. 2. Delegation of Authority. The president or delegate shall administer and implement this policy, including the adoption and amendment of appropriate administrative policies and procedures.

Subd. 3. Application. The administrative policies and procedures implementing this policy shall apply to all University faculty members, employees, trainees, students, and volunteers who handle, transmit, receive, or have access to protected health information in the course of research conducted at the University, through provision of health care at the University, and in the course of health plan administration at the University.