Protected Health Information Privacy Policy out for public comment through June 30

A proposed new policy to ensure the privacy of Protected Health Information (PHI) at the University is now posted for public comment. Faculty, staff and students may send comments to Information Technology Services at InfoSec@mail.wvu.edu before midnight Thursday, June 30.

Read the proposed policy, and be ready to enter valid WVU Login credentials for access.

The Protected Health Information Privacy Policy formalizes existing, industry-standard practices to ensure compliance with the HIPAA Privacy Rule. The policy: defines protected health information; identifies the privacy practices at WVU; distinguishes authorized and unauthorized disclosures of PHI; and outlines the responsibilities of all “University Health Care Components.” The HIPAA Hybrid Entity Designation Policy formally designates as University Health Care Components all WVU schools, departments, clinics, programs and functions that perform Covered Functions under HIPAA.

After the public comment period ends, this policy will be forwarded to the University Planning Committee for final review, revision and approval.