Privacy addresses the protection of privacy in an IT environment. The cybersecurity-related policies in this portfolio are mapped to the NIST SP 800-53 control families.

Policies

• Faculty Senate - Access to Faculty and Staff Electronic Files Policy

• HIPAA _{(on compliance.wisc.edu)}

  • 2.1 Notice of Privacy Practices (NPP)
  • 3.2 Uses and Disclosures of Protected Health Information That Require Patient Authorization
  • 3.3 Uses and Disclosures of PHI Not Requiring Patient Authorization
  • 3.4 Uses and Disclosures of PHI That Require Providing Patient with an Opportunity to Agree or Object
  • 3.5 Uses and Disclosures of Protected Health Information for Education and Training
  • 3.6 Uses and Disclosures of Protected Health Information for Marketing
  • 3.7 Uses and Disclosures of Protected Health Information for Fundraising
  • 3.8 Minimum Necessary Standard
  • 3.9 Verifying Identity and Authority of Persons Seeking Disclosure of a Patient's PHI
  • 3.10 Designated Record Set
  • 3.11 Sale of Protected Health Information Generally Prohibited
  • 5.1 De-identification of Protected Health Information Under the HIPAA Privacy Rule
  • 5.2 Creation of a Limited Data Set Under the HIPAA Privacy Rule
  • 7.1 Requests by Patients for an Accounting of Certain Disclosures
  • 7.2 Requests by Patients to Amend Protected Health Information
  • 7.3 Requests by Patients for Alternative Confidential Communications
  • 7.4 Requests by Patients for Access to Inspect and Obtain a Copy of Protected Health Information
  • 7.5 Requests by Patients for Restrictions on Uses and Disclosures of Protected Health Information
  • 8.5 Security of Faxed, Printed, and Copied Documents Containing Protected Health Information
  • 8.6 Email Communication Involving Protected Health Information
  • 10.1 Complaints Under the HIPAA Privacy Rule

• IT Policy - Collection of Personal Identity Information via Email

• UW-Madison IT Professionals - Guidelines, Best Practices, and Advice _{(on it.wisc.edu)}

• UW System - 25-3 Acceptable Use of Information Technology Resources (privacy and security provisions) _{(on wisconsin.edu)}

Related Documents

• IT Policy-related

  • FERPA Description
  • HIPAA Descrption
  • Non-UW-Madison Applications and Services Guidelines _{(main entry: Acquisition and Development)}