The University of Toledo

Compliance Policies

The University of Toledo is currently undertaking a comprehensive review of all University policies. The Compliance Office is also working diligently to review, revise, and create additional and necessary policies throughout this process. Any new or revised policies will be updated on this page after signature by the President.

Any new or revised policies are posted to the Policies Posted for Comment page for 30 days. All UT community members are welcome and encouraged to comment on the policies within that time frame. If you would like to be included in the email updates that indicate changes to the Policies Posted for Comment page by emailing policies@utoledo.edu.

All current Compliance Policies are listed below:

• 3364-15-01 HIPAA administrative simplification
• 3364-15-02 Detecting and preventing fraud, waste and abuse
• 3364-15-03 Compliance incident reporting (non patient)
• 3364-15-04 Non-retaliation policy
• 3364-15-05 Anonymous reporting line 
• 3364-15-01 Compliance with Privacy and Security of Protected Health Information (PHI)-HSC
• 3364-15-09 Disposal of protected health information (PHI)
• 3364-15-10 Confidentiality of Patient Information
• 3364-15-12 Identity theft detection, prevention, and mitigation

 

Current HIPAA Policies listed below:

• 3364-100-90-01 Release of Information
• 3364-100-90-02 Minimum Necessary Guidelines for Use Disclosure of Protected Health Information
• 3364-100-90-03 Patient Request for Restriction on Health Information
• 3364-100-90-04 Designated Record Set
• 3364-100-90-05 De-Identifiable and Re-Identifiable Health Information
• 3364-100-90-06 Patient Request to Receive Communications of Protected Health Information (PHI) by Alternative Means/Locations
• 3364-100-90-07 Right to Access and Amend PHI
• 3364-100-90-08 Patient Directory
• 3364-100-90-09 Joint Notice of Privacy Practices
• 3364-100-90-11 Accounting and Documentation of Disclosures of Protected Health Information other than Treatment, Payment or Healthcare Operations
• 3364-100-90-12 Security and Protection of Patient Information - Both Paper and Electronic
• 3364-100-50-40 Retention and Destruction of Medical Records