Information Privacy & Security
University
| Title | Policy | Form |
|---|---|---|
Confidentiality |  | |
Confidentiality of Health Information | | |
Purchasing and Contracting: Confidentiality of Health Information | | |
Acceptable Use of Computing and Telecommunications Resources | | |
Research Involving Humans [Includes: IRB authority, IRB Procedures] | | |
Authorization For Use of Information by The OHSU Foundation for Charitable Giving |  | |
OHSU Visiting Scientists & Other Affiliates (OIO/HR/Public Safety policy) |  |
Back to Information Privacy and Security
Healthcare System: Patient Rights
| Title | Policy |
|---|---|
Notice of Privacy Practices | |
Patient Rights | |
Right to an Accounting of Disclosures of Health Information | |
Right to Confidential Communication of Health Information | |
Right to Request Access to Inspect or Obtain Copy of Own Health Information | |
| Title | Policy |
|---|---|
Right to Request an Amendment of Health Information | |
Right to Request Restrictions on Use and Disclosure of Health Information for Treatment, Payment, or Healthcare Operations | |
Healthcare System: Uses and Disclosures of Health Information
| Title | Policy |
|---|---|
Authorization for Use and Disclosure of Health Information | |
Confidentiality: LCR/EHR Access by OHSU Staff | |
Designated Record Set / Legal Health Record | |
Law Enforcement Relations | |
Minimum Necessary Requirements | |
| Title | Policy |
|---|---|
Patient Confidentiality | |
Permitted Uses and Disclosures of Health Information | |
Sales Representatives | |
Uses and Disclosures of Health Information for a Facility Directory (Census) | |
Uses and Disclosures of Health Information for the Involvement of Family and Friends in a Patient's Care | |
| Title | Policy |
|---|---|
Uses and Disclosures of Health Information for which Authorization or an Opportunity to Agree or Object is Not Required | |
| Education Privacy Policy | |
| Title | Policy | Forms |
|---|---|---|
| Notice of Privacy Practices: English | | |
Notice of Privacy Practices: English Large Font | | |
| Notice of Privacy Practices: Chinese | | |
| Notice of Privacy Practices: Spanish | | |
| Notice of Privacy Practices: Russian | | |
| Notice of Privacy Practices: Vietnamese | | |
Notice of Privacy Practices Acknowledgement: Chinese | | |
Notice of Privacy Practices Acknowledgement: Russian | |
Back to Information Privacy and Security
| Title | Forms |
|---|---|
Request to Inspect or Obtain Copies of Own Health Information | |
Request for an Accounting of Disclosures | |
Request for Amendment of Health Information | |
Request for Restriction on Use and Disclosure of Health Information | |
Request for Specified Method of Communication | |
Information Security
| Title | Policy | |
|---|---|---|
| ISD-700-00001 | Information Security Rules | |
| ISD-700-00002 | Unique User Identification (Login-name) | |
| ISD-700-00003 | User Authentication | |
| ISD-700-00004 | Password Standards | |
| ISD-700-00005 | Securing or Logging Off of Electronic Sessions | |
| ISD-700-00006 | Secure Storage of Electronic Restricted Information | |
ISD-700-00007 | Secure Transmission of Electronic Restricted Information | |
ISD-700-00008 | Audit Controls | |
| ISD-700-00009 | Access Authorization to Electronic Restricted Information | |
| ISD-700-00010 | Information Systems Contingency Planning | |
| ISD-700-00011 |
| |
| ISD-700-00012 | Physical Safeguards for Computing Devices & Electronic Media | |
| ISD-700-00013 | Emergency Access to User Accounts and Files | |
| ISD-700-00014 | Access to Extensions for Individuals' Messaging Accounts | |
| ISD-700-00015 | Facility Security Maintenance Records | |
| ISD-700-00016 | Information Security Policy Exceptions | |
| ISD-700-00017 | Information Security Incident Reporting Procedures | |
| ISD-700-00018 | End-User Applications | |
| ISD-700-00019 | Information System Security Baselines | |
| ISD-700-00020 | Physical Safeguards for Restricted Information in Printed Format | |
Research Forms
| Title | Forms |
|---|---|
HIPAA Authorization for Obtaining Existing Records Outside of OHSU |
|
HIPAA Research Authorization-Short Form |
|
HIPAA Research Authorization-Barcode |
|
HIPAA Research Authorization |
|
HIPAA Research Authorization (Large Print) |
|
| Title | Forms |
|---|---|
HIPAA Research Authorization (Spanish) |
|
Representation Form for Research Involving Only Decedents' Information |
|
Sample Consent and HIPAA Authorization |
|
Waiver or Alteration of HIPAA Authorization |
|
Other Important Information Privacy Forms
| Title | Forms |
|---|---|
Business Associate Agreement |
|
Data Use Agreement (For Public Health and/or Healthcare Operational Purposes) |
 |
Oregon Consumer Identity Theft Protection Act
| Title | Supplemental Information |
|---|---|
Division of Finance and Corporate Securities |
 |
Protecting Your Personal Information |
|
Back to Information Privacy and Security
OHSU Information Security Guidelines
| Title | Policy |
|---|---|
Dept. of Public Safety Access to Records |
|
Encrypted Transmission |
|
Encrypting or Password Protecting Files |
|
Protecting your Laptop and its Information from Theft |
|
OHSU Remote Access Guidelines |
|
| Title | Policy |
|---|---|
Research & Information Security Resource Guide |
|
Role Based Access Matrix for Enterprise Systems |
|
Sanitization of Non-OHSU Computing Devices & Media that Contain Restricted Information |
|
Workstation Physical Safeguard Guidelines |
|
Back to Information Privacy and Security
Privacy Cards
| Title | Supplemental Information |
|---|---|
English |
|
Chinese |
|
Russian |
|
Spanish |
|
Vietnamese |
|
