Keydate:	2005-01-01
Policy Name:	Use and Disclosure of PHI
Policy Code:	ADM.HC.200.018
Status:	Approved and Activated
Administrative Division:	Provost/VC for Academic Affairs
Responsible Office:	Provost/VC for Academic Affairs
Effective Date:	08/08/2025
Last Changed by:	Williams, Carolyn Jeanett on 06/12/2025
Policy Narrative:	PDF File

Policy Summary/Purpose:
The purpose of this policy is to ensure compliance with the HIPAA Privacy Rule
(45 CFR Part 160, and Subparts A, D, and E of Part 164) by establishing
standards, expectations, and requirements for University of Mississippi (UM)
for safeguarding confidentiality, integrity, and availability of UM's
Information Assets (HIPAA electronic PHI and other confidential data). This
policy ensures that the confidentiality, integrity, and security of PHI are
maintained, while also providing clear guidance on when PHI can be disclosed
or used within the organization and to third parties. All terms with a
definition set forth in the HIPAA Privacy Rule have the same meaning in this
policy.