HIPPA Policy

Policy Statement

SUNY Brockport is committed to protecting the privacy and confidentiality of health information of the campus community it serves. Health information is strictly confidential and should never be disclosed, nor confirmed to anyone who is not specifically authorized under the institution’s policies or applicable law to receive the information.

Failure to adhere to state and federal law or SUNY Brockport policies and procedures regarding the confidentiality of protected information will be considered a breach of confidentiality and will result in the imposition of appropriate sanctions.

Purpose/Scope

There is no purpose/scope provided for this policy at this time

Applicability

This policy applies to all members of SUNY Brockport community, whether directly employed by the institution or serving under an alternative arrangement. It shall include, but not be limited to:

• Employees
• Volunteers
• All students participating in a health related program (including medical interns and residents)
• Agency and contracted staff (including temporary staff)
• Consultants
• Contractors and subcontractors
• Faculty and credentialed staff

Definitions

There are no definitions for this policy at this time.

Policy Procedures

1. SUNY Brockport is responsible for providing job appropriate training to its workforce regarding:

1. The need for confidentiality
2. Types of information that are considered confidential
3. Sanctions associated with a breach of confidentiality
4. The institution’s confidentiality agreement 

2. Each member of SUNY Brockport’s affected workforce will be expected to review and sign the confidentiality agreement. This will occur upon hire/affiliation. This signed statement will be maintained in the appropriate employee file.

3. Any and all breaches of confidentiality should be reported to the department supervisor. Failure to report a breach will be considered a violation of this policy. Investigation of a suspected breach of confidentiality will be done in concert with the University’s privacy official or his/her designee.

4. Upon a finding of a breach of confidentiality by an employee in a collective bargaining unit, the University may initiate action pursuant to the applicable collective bargaining agreement.

Links to Related Procedures and Information

There are no links for this policy at this time.

Contact Information

There is no contact information for this policy at this time.

History (in descending order)

Approval

There are no approvals for this policy at this time.