Privacy
Authorizations
Disclosure Tracking
- Disclosure tracking for UC Davis Health System. Enter your disclosures here. (Intranet only)
- Disclosure training — Short summary of disclosure policy and procedures.
Notice of Privacy Practices
- Notice of privacy practices — The notice to patients of what UC Davis Health System does with health information.
- Notificacion de las practicas de privacidad
- Уведомление о правилах конфиденциальности [Russian notice]
- Acknowledgment of receipt of notice
- Notice of privacy practices, mental health patients — California law has significant effect upon privacy practices for mental health patients, so a separate notice is provided.
Research
Applications and forms
- Research preparation application — To obtain permission to review PHI in preparation for a research project. Do not use if you intend to use the data for publication.
- Decedent research application — To obtain permission to use PHI for decedent research when no identifiers are linked to living persons.
- Research authorization — Standard authorization for release of information for research. Download and customize for your project.
- UC Davis Human Subjects Forms
Guidance
- De-identification — Methods and guidance regarding both statistical and "safe harbor" methods of de-identifying protected health information.
- Limited datasets — Requirements for limited data sets and data use agreements.
- Research quick reference — Quick guide to changes occurring with HIPAA.
- Research Q&A
- HIPAA Privacy Rule and Its Impacts on Research — NIH site acting as repository for government guidance on HIPAA and research.
- Health Services Research and the HIPAA Privacy Rule — guidance from NIH
The Law
- Full text of HIPAA regulations as of April 17, 2003.
- HIPAA administrative simplification act
- Penalties under HIPAA
General Guidance
Internal
- Social networking guidance - Intranet
- Frequently asked questions - Last updated Wednesday, Oct 4, 2006.
- Friends, relatives, neighbors - Who can you talk to about a patient's condition?
- Managers' HIPAA guide - A basic list of “to-do's” for every manager.
- University of California — About HIPAA - Main UC Office of the President site.
External
- Am I a covered entity? A decision tool developed by DHHS
- CalOHI documents — Set of policies and procedures for state agencies.
- Office for Civil Rights — Privacy of Health Records
- Privacy case examples
- The right to privacy — The seminal law article in the United States. Discusses threat to privacy by new technologies. Written in 1890.
Self-study modules
- Privacy and Security Self Study Module- New module
For annual Privacy and Security training credit, please log-in to UC Learning Center - HIPAA research self-study module
You will need to know your employee ID number available so you can document taking these courses. Adobe Acrobat Reader version 5 (or later) is required. When you submit the roster form, you will receive a message that the information has been sent. If that does not appear, you may have a computer compatibility problem or an earlier version of Acrobat Reader. In that case, print only the roster form page, fill it out and send to:
| UC Davis Health System workforce | UC Davis workforce |
| Training and Development Human Resources UC Davis Health System Ticon III |
Staff Development Human Resources UC Davis TB 121 |
Regulatory History
HIPAA administrative simplification compliance deadlines
Date |
Deadline |
|
October 15, 2002 |
Deadline to submit a compliance extension form for Electronic Health Care Transactions and Code Sets. |
|
October 16, 2002 |
Electronic Health Care Transactions and Code Sets: all covered entities except those that filed for an extension and are not a small health plan. |
|
April 14, 2003 |
Privacy: all covered entities except small health plans. |
|
April 16, 2003 |
Electronic Health Care Transactions and Code Sets: all covered entities must have started software and systems testing. |
|
July, 2003 |
Electronic Medicare claims submission: NPRM |
|
August, 2003 |
Standard unique national health plan identifiers: final rule |
|
October 16, 2003 |
Electronic Health Care Transactions and Code Sets: all covered entities who filed for an extension and small health plans. |
|
October 16, 2003 |
Medicare will only accept paper claims under limited circumstances. |
|
January, 2004 |
Claims attachment standards: NPRM |
|
February, 2004 |
Modifications to electronic transactions and code sets: NPRM |
|
April 14, 2004 |
Privacy: small health plans. |
|
July 30, 2004 |
Employer Identifier Standard: all covered entities except small health plans. |
|
April 20, 2005 |
Security Standards: all covered entities except small health plans. |
|
August 1, 2005 |
Employer Identifier Standard: small health plans. |
|
April 20, 2006 |
Security Standards: small health plans. |
|
May 23, 2007 |
National Provider Identifier (NPI): all covered entities except small health plans. |
|
May 23, 2008 |
NPI: small health plans. |
|
January, 2004 |
Claims attachment standards: NPRM |
|
February, 2004 |
Modifications to electronic transactions and code sets: NPRM |
|
(NPRM = Notice of Proposed Rule Making = preliminary regulation, up for comments) |
|

