The Health Insurance Portability and Accountability Act of 1996 (HIPAA) a.k.a. Kennedy-Kazenbaum (HIPAA) was enacted as a part of a broad Congressional attempt at health care reform. While HIPAA’s initial focus is to guarantee the portability of health insurance, the Act also is designed to:

1.    reduce the costs and administrative burdens of health care by making possible the standardized electronic transmission of many administrative and financial transactions that are currently carried out on paper; and

2.    protect the security and confidentiality of personally identifiable health information (PHI).

The State University of New York is considered a covered entity under HIPAA. As such, it must ensure that its operations are in compliance with the HIPAA regulations by the effective dates set forth in the regulations.

It is the responsibility of individual University campuses to comply with the requirements of HIPAA. University system administration provides guidance and recommendations and establishes position statements on issues common to multiple campuses.

To facilitate the efficient flow of resources developed by system administration to the  HIPAA covered campuses, a website has been established. This HIPAA website houses:

• HIPAA Fact Sheets;
• Position Statements;
• HIPAA Related Communications;
• Library of additional resources;
• Frequently Asked Questions;
• Glossary; and
• HIPAA Contacts

This website is continually updated and serves as a primary communication vehicle and resource for the campuses’ HIPAA privacy compliance activities.

There are no special definitions relevant to this requirement.

There is no related procedures relevant to this requirement.

There are no forms relevant to this requirement.

Health Insurance Portability and Accountability Act of 1996 P.L. 104-191

Final HIPAA Privacy Rule (45 CFR Parts 160 and 164)

U.S Department of Health and Human Services

NYS Governor’s Office of Employee Relations HIPAA Training

There are no appendicies relevant to this requirement.