The University of Texas System
Employee Group Insurance Home PageSkip Menu
 

HIPAA Privacy Policies and Forms

You will need Adobe Acrobat Reader to view PDF files.

HIPAA Privacy Compliance Manual for The University of Texas System Administration


Notice of Privacy Practices for UT SELECT, UT DENTAL SELECT and UT FLEX 42 KB


FORMS
Complaint Form
General Authorization Form
Staff Assistance Authorization
Request for Access
Request for Accounting
Request for Amendment
Request for Confidential Communications of Medical Info.
Request for Restriction
Revocation of Authorization
Disclosure Log

 

All current and retired employees enrolled in The University of Texas Systems self-insured employee group health plans (UT Select, UT Dental Select and UT Flex) are entitled to receive a Notice of the Privacy Policies and Procedures adopted by the Office of Employee Group Insurance ("EGI") of The University of Texas System Administration as a health plan in compliance with Title 2 of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the federal regulations adopted to implement HIPAA (45 CFR Parts 160 & 164 "the HIPAA Privacy Rule").  Similar privacy policies have also been adopted by all carriers who provide the fully-insured group health plans in which current and retired employees are also eligible to enroll in through EGI.

EGI's Privacy Policies are set forth below, along with a copy of EGI's Privacy Notice, its HIPAA Complaint Form and the other forms created for use in accessing the patient rights created by the HIPAA Privacy Rule.

Please be assured that EGI's policy has always been and continues to be that utmost care be used at all times to safeguard any information provided to EGI by or for its enrollees. Information is released only when it is required to make sure that your health care provider is properly reimbursed for medical services provided to you, for reasons related to the provision and maintenance of coverage, or if required by law.



HIPAA PRIVACY COMPLIANCE MANUAL for The University of Texas System Administration
Download entire PDF document 416 KB

TABLE OF CONTENTS
Policy 1 Introduction & Definitions 146 KB
Policy 2 Organization of EGI for HIPAA Privacy Standard Compliance Purposes 90 KB
Policy 3 Director and Contact Person 95 KB
Policy 4 PHI Requests, Access, Uses and Disclosures 93 KB

Section 4.1 Requests for PHI by EGI 96 KB
Section 4.2 The EGI Hybrid Entity; Access to PHI 95 KB
Section 4.3 Uses and Disclosures Required by Law 115 KB
Section 4.4 Discretionary Uses and Disclosures Without An Authorization 125 KB
Section 4.5 Conducting Underwriting Activities 84 KB
Section 4.6 Research Disclosures and Uses 77 KB
Section 4.7 Making Notification Disclosures 86 KB
Section 4.8 Review of Requests for Use or Disclosure Requiring Approval by the Privacy Officer 90 KB
Section 4.9 Minimum Necessary Standard for Uses and Disclosures of PHI 96 KB
Section 4.10 Verification of Requestor's Identity and Authority 97 KB
Section 4.11 Obtaining and Relying Upon an Authorization 97 KB
Section 4.12 Personal Representatives 87 KB
Section 4.13 De-identified Information 81 KB
Section 4.14 Documentation of Disclosures 98 KB
Policy 5 EGI As a Plan Sponsor 103 KB
Policy 6 Relationships With Other Entities 85 KB
Section 6.1 Business Associates 92 KB
Section 6.2 Carriers Providing Group Health Plan Coverage 92 KB
Section 6.3 Agreements With Recipients of a Limited Data Set 95 KB

Policy 7 Individual Rights 87 KB

Section 7.1 Notice of Individual Rights Concerning PHI 102 KB
Section 7.2 Right to Access Protected Health Information 105 KB
Section 7.3 Requests to Amend PHI 102 KB
Section 7.4 Right to Receive Accounting of Disclosures 91 KB
Section 7.5 Requests for Restrictions on Use and Disclosure 87 KB
Section 7.6 Requests for Confidential Communications 87 KB
Section 7.7 Right to Make Complaints 89 KB

Policy 8 Ensuring Privacy Compliance 78 KB

Section 8.1 Cooperation With the Secretary's Investigation 86 KB
Section 8.2 Training 85 KB
Section 8.3 Safeguarding Protected Health Information 91 KB
Section 8.4 Mitigation of Known Privacy Violations 92 KB
Section 8.5 Sanctions for Personnel Violations of Privacy 91 KB

Policy 9 Documentation 84 KB

Section 9.1 Changes to Privacy Policies and Procedures 82 KB
Section 9.2 Retention of Privacy Documentation 98 KB