OHSU

Information Privacy & Security

University

Title Policy Form

Confidentiality                                                             
Intranet Only		  

Confidentiality of Health Information
Intranet Only

Purchasing and Contracting: 

Confidentiality of Health Information
(Includes: Business Associate Agreements and Data Use Agreements)
Intranet Only
  

Acceptable Use of Computing and Telecommunications Resources		 Intranet Only
  

Research Involving Humans [Includes: IRB authority, IRB Procedures]             
 Intranet Only
  
 
Authorization For Use of Information by The  OHSU Foundation for Charitable Giving
    
Foundation for Charitable Giving Form

Back to Information Privacy and Security

 

 




Healthcare System: Patient Rights

Title Policy

Notice of Privacy Practices                                                                                       
Intranet Only

Patient Rights
Intranet Only

Right to an Accounting of Disclosures of Health Information
Intranet Only

Right to Confidential Communication of Health Information		 Intranet Only

Right to Request Access to Inspect or Obtain Copy of Own Health Information		 Intranet Only

Title Policy

Right to Request an Amendment of Health Information                                         
 Intranet Only

Right to Request Restrictions on Use and Disclosure of Health Information

for Treatment, Payment, or Healthcare Operations

 Intranet Only
Back to Information Privacy and Security
 




Healthcare System: Uses and Disclosures of Health Information

Title Policy

Authorization for Use and Disclosure of Health Information                                  
Intranet Only

Confidentiality: LCR/EHR Access by OHSU Staff
Intranet Only

Designated Record Set / Legal Health Record
Intranet Only

Law Enforcement Relations
Intranet Only

Minimum Necessary Requirements
Intranet Only


Title Policy

Patient Confidentiality                                                                                               
Intranet Only

Permitted Uses and Disclosures of Health Information
Intranet Only

Sales Representatives
Intranet Only

Uses and Disclosures of Health Information for a Facility Directory (Census)
Intranet Only

Uses and Disclosures of Health Information for the Involvement of

Family and Friends in a Patient's Care
Intranet Only

Title Policy

Uses and Disclosures of Health Information for which Authorization or               

an Opportunity to Agree or Object is Not Required

 Intranet Only
Education Privacy Policy
Title Policy Forms
Notice of Privacy Practices: English
 Intranet Only
 Forms

Notice of Privacy Practices: English Large Font
  Intranet Only  Forms
 
Notice of Privacy Practices: Chinese

  Intranet Only  Forms
Notice of Privacy Practices: Spanish  Intranet Only  Forms
Notice of Privacy Practices: Russian
  Intranet Only  Forms
Notice of Privacy Practices: Vietnamese
 Intranet Only   
Forms

Notice of Privacy Practices Acknowledgement: Chinese
Forms

Notice of Privacy Practices Acknowledgement: Russian
Forms

Back to Information Privacy and Security
 





Title Forms

Request to Inspect or Obtain Copies of Own Health Information
Forms

Request for an Accounting of Disclosures
Forms

Request for Amendment of Health Information
Forms

Request for Restriction on Use and Disclosure of Health Information
Forms

Request for Specified Method of Communication
Forms

Title Forms

Request to Inspect or Obtain Copies of Own Health Information            
Forms

Request for an Accounting of Disclosures
Forms

Request for Amendment of Health Information
Forms

Request for Restriction on Use and Disclosure of Health Information
Forms

Request for Specified Method of Communication
Forms
 

 

Information Security

 Title Policy
ISD-700-00001      Information Security Rules                                                          
Intranet Only
ISD-700-00002      Unique User Identification (Login-name)                                 
Intranet Only
ISD-700-00003      User Authentication
Intranet Only
ISD-700-00004
      Password Standards
Intranet Only
ISD-700-00005      Securing or Logging Off of Electronic Sessions                          
Intranet Only
ISD-700-00006      Secure Storage of Electronic Restricted Information        
Intranet Only

ISD-700-00007		     
     Secure Transmission of Electronic Restricted Information		  
Intranet Only

ISD-700-00008		      
      Audit Controls
Intranet Only 
ISD-700-00009       Access Authorization to Electronic Restricted Information
Intranet Only
ISD-700-00010       Information Systems Contingency Planning                                   
  
Intranet Only
ISD-700-00011

Computing Device & Electronic Restricted Information

  
Intranet Only
ISD-700-00012      Physical Safeguards for Computing Devices & Electronic Media  
Intranet Only
ISD-700-00013      Emergency Access to User Accounts and Files                            
  
Intranet Only
ISD-700-00014      Access to Extensions for Individuals' Messaging Accounts  
Intranet Only
ISD-700-00015      Facility Security Maintenance Records  
Intranet Only
ISD-700-00016      Information Security Policy Exceptions  
Intranet Only
ISD-700-00017      Information Security Incident Reporting Procedures  
Intranet Only
ISD-700-00018      End-User Applications                                                                       
  
Intranet Only
ISD-700-00019

     Information System Security Baselines

  
Intranet Only

Back to Information Privacy & Security
 


Research Forms

Title Forms

HIPAA Authorization for Obtaining Existing Records Outside of OHSU     
Forms

HIPAA Research Authorization-Short Form
 Forms


HIPAA Research Authorization-Barcode
 Forms


HIPAA Research Authorization
 Forms

HIPAA Research Authorization (Large Print)
 Forms

Title Forms


HIPAA Research Authorization (Spanish)

 Forms

Representation Form for Research Involving Only Decedents' Information
 Forms


Sample Consent and HIPAA Authorization

 Forms


Waiver of Authorization
Forms


Back to Information Privacy and Security
 



Other Important Information Privacy Forms

Title Forms

Business Associate Agreement
Forms

Data Use Agreement (For Public Health and/or Healthcare Operational Purposes
Forms
 


Oregon Consumer Identity Theft Protection Act

Title Supplemental Information

Division of Finance and Corporate Securities
Supplementary Information

Protecting Your Personal Information
Supplementary Information

Back to Information Privacy and Security

 



OHSU Information Security Guidelines

Title Policy

Dept. of Public Safety Access to Records
Intranet Only

Encrypted Transmission
 Intranet Only

Encrypting or Password Protecting Files
 Intranet Only

Protecting your Laptop and its Information from Theft
 Intranet Only

OHSU Remote Access Guidelines		 Folder

Title Policy

Research & Information Security Resource Guide
 Intranet Only

Role Based Access Matrix for Enterprise Systems
 Intranet Only

Sanitization of Non-OHSU Computing Devices & Media that Contain Restricted Information
 Intranet Only

Workstation Physical Safeguard Guidelines
Intranet Only

Back to Information Privacy and Security