Keydate:	2019-11-01
Policy Name:	Hybrid Entity Policy & Glossary
Policy Code:	ACA.HC.100.001
Status:	Approved and Activated
Administrative Division:	Provost/VC for Academic Affairs
Responsible Office:	Provost/VC for Academic Affairs
Effective Date:	11/01/2019
Last Changed by:	Forgette, Richard G on 10/31/2022
Policy Narrative:	PDF File

Policy Summary/Purpose:
This policy is to define the Oxford, MS Campus of the University of Mississippi
(UM) as a Hybrid entity whose business activities include both covered and
non-covered functions in accordance with the Health Insurance Portability and
Accountability Act of 1996 (“HIPAA”) and the Health Information Technology for
Economic and Clinical Health Act of 2009 (“HITECH”).
As a Hybrid entity, UM is a single legal entity including both covered and
non-covered entities. HIPAA Covered Entities must adhere to the privacy and
security regulations designated in the Health Insurance Portability and
Accountability Act of 1996 (“HIPAA”) and the Health Information Technology for
Economic and Clinical Health Act of 2009 (“HITECH”); specifically, the
requirements defined in 45 CFR §§ 164.103 and 164.105.
This policy addresses only the hybrid entity status of the Oxford Campus of the
University of Mississippi. The University of Mississippi Medical Center (UMMC)
in Jackson, MS has separate and distinct policies on HIPAA compliance.

Keydate:	2005-01-01
Policy Name:	Hybrid Entity Policy
Policy Code:	ACA.HC.100.001
Status:	Deactivated
Administrative Division:	Provost/VC for Academic Affairs
Responsible Office:	Provost/VC for Academic Affairs
Effective Date:	03/08/2018
Last Changed by:	Clemmer, Sharon Elaine on 10/09/2019
Policy Narrative:	PDF File

Policy Summary/Purpose:
This policy is to define the Oxford, MS Campus of the University of Mississippi
(UM) as a Hybrid entity whose business activities include both covered and
non-covered functions in accordance with the Health Insurance Portability and
Accountability Act of 1996 (“HIPAA”) and the Health Information Technology for
Economic and Clinical Health Act of 2009 (“HITECH”).
As a Hybrid entity, UM is a single legal entity including both covered and
non-covered entities. HIPAA Covered Entities must adhere to the privacy and
security regulations designated in the Health Insurance Portability and
Accountability Act of 1996 (“HIPAA”) and the Health Information Technology for
Economic and Clinical Health Act of 2009 (“HITECH”); specifically, the
requirements defined in 45 CFR §§ 164.103 and 164.105.
This policy addresses only the hybrid entity status of the Oxford Campus of the
University of Mississippi. The University of Mississippi Medical Center (UMMC)
in Jackson, MS has separate and distinct policies on HIPAA compliance.