The Health Insurance Portability & Accountability Act (HIPAA)
HIPAA is a complex statute that, among other things, establishes privacy standards for the use and disclosure of individually identifiable health information, security standards for certain health information in electronic form and transaction standards for the exchange of health information. This web site provides information and guidance regarding HIPAA and the University of Kansas, Lawrence Campus.
HIPAA Training
Faculty, staff, and students working in clinics on the Lawrence Campus, and certain staff working in units that provide support services to clinics are required to complete Privacy and Security Awareness education. These may be accessed at the following links. After reviewing Privacy Awareness and Security Awareness, complete the Knowledge Review. A record of completion will be saved electronically for tracking.
Step 1 Privacy Awareness
Step 2 Security Awareness
Step 3 Knowledge Review (Requires KU Online ID to logon)
Training regarding unit-specific policies and procedures is provided by the unit involved.
Individuals engaged in research or sponsored projects involving protected health information are subject to separate training requirements as implemented by the Human Subjects Committee, Lawrence Campus.
National Provider Identifier (NPI) Notices
- NPI Application Deadline is May 23, 2007
- NPI tip:
When applying for your NPI, Centers for Medicare & Medicaid Services (CMS) urges you to include your legacy identifiers, not only for Medicare but for all payors. If reporting a Medicaid number, include the associated State name. This information is critical for payors in the development of crosswalks to aid in the transition to the NPI.
- For more information, please see CMS or contact the KU Privacy Office.
- NPI Memo 6/14/2006 (42 KB)
Clinic Policies & Procedures Regarding Privacy & Security of Patient Information
This document is intended to provide University Clinics operating on the Lawrence Campus with general guidance and standards regarding the handling of health information.