Information Privacy & Security
University
| Title | Policy | Form |
|---|---|---|
Confidentiality |
 |
|
Confidentiality of Health Information |
|
|
Purchasing and Contracting: Confidentiality of Health Information |
|
|
Acceptable Use of Computing and Telecommunications Resources |
|
|
Research Involving Humans [Includes: IRB authority, IRB Procedures] |
|
|
Authorization For Use of Information by The OHSU Foundation for Charitable Giving |
 |
|
OHSU Visiting Scientists & Other Affiliates (OIO/HR/Public Safety policy) |
 |
Back to Information Privacy and Security
Healthcare System: Patient Rights
| Title | Policy |
|---|---|
Notice of Privacy Practices |
|
Patient Rights |
|
Right to an Accounting of Disclosures of Health Information |
|
Right to Confidential Communication of Health Information |
|
Right to Request Access to Inspect or Obtain Copy of Own Health Information |
|
| Title | Policy |
|---|---|
Right to Request an Amendment of Health Information |
|
Right to Request Restrictions on Use and Disclosure of Health Information for Treatment, Payment, or Healthcare Operations |
|
Healthcare System: Uses and Disclosures of Health Information
| Title | Policy |
|---|---|
|
|
|
Confidentiality: LCR/EHR Access by OHSU Staff |
|
Designated Record Set / Legal Health Record |
|
Law Enforcement Relations |
|
Minimum Necessary Requirements |
|
| Title | Policy |
|---|---|
Uses and Disclosures of Health Information for which Authorization or an Opportunity to Agree or Object is Not Required |
|
| Education Privacy Policy |
|
| Title | Policy | Forms |
|---|---|---|
| Notice of Privacy Practices: English |
|
|
Notice of Privacy Practices: English Large Font |
|
|
| Notice of Privacy Practices: Chinese |
|
|
| Notice of Privacy Practices: Spanish | |
|
| Notice of Privacy Practices: Russian |
|
|
| Notice of Privacy Practices: Vietnamese |
|
|
Notice of Privacy Practices Acknowledgement: Chinese |
|
|
Notice of Privacy Practices Acknowledgement: Russian |
|
Back to Information Privacy and Security
| Title | Forms |
|---|---|
Request to Inspect or Obtain Copies of Own Health Information |
|
Request for an Accounting of Disclosures |
|
Request for Amendment of Health Information |
|
Request for Restriction on Use and Disclosure of Health Information |
|
Request for Specified Method of Communication |
|
Information Security
| Title | Policy | |
|---|---|---|
| ISD-700-00001 | Information Security Rules |
|
| ISD-700-00002 | Unique User Identification (Login-name) |
|
| ISD-700-00003 | User Authentication |
|
| ISD-700-00004 |
Password Standards |
|
| ISD-700-00005 | Securing or Logging Off of Electronic Sessions |
|
| ISD-700-00006 | Secure Storage of Electronic Restricted Information |
|
ISD-700-00007 |
Secure Transmission of Electronic Restricted Information |
|
ISD-700-00008 |
Audit Controls |
|
| ISD-700-00009 | Access Authorization to Electronic Restricted Information | |
| ISD-700-00010 | Information Systems Contingency Planning |
|
| ISD-700-00011 |
|
|
| ISD-700-00012 | Physical Safeguards for Computing Devices & Electronic Media | |
| ISD-700-00013 | Emergency Access to User Accounts and Files |
|
| ISD-700-00014 | Access to Extensions for Individuals' Messaging Accounts | |
| ISD-700-00015 | Facility Security Maintenance Records | |
| ISD-700-00016 | Information Security Policy Exceptions | |
| ISD-700-00017 | Information Security Incident Reporting Procedures | |
| ISD-700-00018 | End-User Applications |
|
| ISD-700-00019 |
Information System Security Baselines |
|
| ISD-700-00020 |
Physical Safeguards for Restricted Information in Printed Format |
|
Back to Information Privacy & Security
Research Forms
| Title | Forms |
|---|---|
HIPAA Authorization for Obtaining Existing Records Outside of OHSU |
|
HIPAA Research Authorization-Short Form |
|
HIPAA Research Authorization-Barcode |
|
HIPAA Research Authorization |
|
HIPAA Research Authorization (Large Print) |
|
| Title | Forms |
|---|---|
HIPAA Research Authorization (Spanish) |
|
Representation Form for Research Involving Only Decedents' Information |
|
Sample Consent and HIPAA Authorization |
|
Waiver or Alteration of HIPAA Authorization |
|
Other Important Information Privacy Forms
| Title | Forms |
|---|---|
Business Associate Agreement |
|
Data Use Agreement (For Public Health and/or Healthcare Operational Purposes) |
 |
Oregon Consumer Identity Theft Protection Act
| Title | Supplemental Information |
|---|---|
Division of Finance and Corporate Securities |
 |
Protecting Your Personal Information |
|
Back to Information Privacy and Security
OHSU Information Security Guidelines
| Title | Policy |
|---|---|
Dept. of Public Safety Access to Records |
|
ISG-700-00004 Encrypted Transmission |
|
ISG-700-00002 Encrypting or Password Protecting Files |
|
Protecting your Laptop and its Information from Theft |
|
OHSU Remote Access Guidelines |
|
| Title | Policy |
|---|---|
Research & Information Security Resource Guide |
|
ISG-700-00005 Information Security Sanctions
Social Networking Safety Tips
Social Networking on the Internet |
|
ISG-700-00003 Sanitization of Non-OHSU Computing Devices & Media that Contain Restricted Information |
|
Back to Information Privacy and Security
Privacy Cards
| Title | Supplemental Information |
|---|---|
English |
|
Chinese |
|
Russian |
|
Spanish |
|
Vietnamese |
|
