Institutional Compliance
The 鶹ýInstitutional Compliance program is intended to provide all employees of 鶹ýwith policies, procedures, informational resources, and links to training that promote law-abiding and ethical actions in all workplace conduct. This program is also designed to prevent, detect, and eliminate regulatory violations, fraud, and abuse if they should exist with the University system.
Employee Compliance
As a 鶹ýemployee, you are expected to be familiar with the regulatory and ethical conduct responsibilities of your specific position within the 鶹ýsystem. You are expected to satisfy all training requirements related to your job responsibilities of a regulatory nature. Should you witness or become aware of unethical or illegal conduct, or actions of fraud or abuse, you are responsible to report such knowledge to your immediate supervisor, to a 鶹ýcompliance officer, or to the 鶹ýchief compliance officer through direct contact or through the Compliance Hotline reporting system.
HIPAA Compliance
The Health Insurance Portability and Accountability Act (HIPAA) and its implementing regulations apply to individuals and organizations meeting the HIPAA definition of “Covered Entities.” These covered entities include group health plans, health care providers who conduct certain transactions electronically — including but not limited to transmissions of health care claims — health care payments, enrollment in a health plan and referral authorizations and health care clearinghouses. Although 鶹ýdoes not primarily or solely engage in any of these activities, some units within the University perform functions that bring them within the definition of a covered entity under HIPAA.
鶹ýperforms both non-covered and covered entity functions to carry out its educational mission by providing health care in different contexts. HIPAA allows an entity that engages in limited HIPAA-covered functions, to designate itself as a hybrid entity. A hybrid entity is a single legal entity that performs both covered entity functions and non-covered entity functions. The HIPAA regulations and requirements only apply to the covered entity components.
鶹ýdeclares itself a hybrid entity and has designated the following 鶹ýunits as Covered Entity Components:
View the 鶹ýNotice of Privacy Practice and .
