How Does HIPAA Apply to Yale?
HIPAA applies to covered entities; health care providers; health plans, defined by HIPAA as individual or group plans that provide or pay for health care, including employer plans; and health care clearinghouses. Within Yale, HIPAA applies to: • the School of Medicine, Yale Medical Group, Yale School of Nursing, Department of Psychology • Yale University Health Services • the University’s group health plan • Other departments that may perform support functions for the health care components (e.g., the Provost’s Office or the Office of the Vice President and General Counsel). If you are in doubt whether HIPAA applies to you, please contact hipaa@yale.edu. PHI and ePHI ePHI stands for Electronic Protected Health Information. It is any protected health information (PHI) which is created, stored, transmitted, or received electronically. Protected Health Information (PHI) under HIPAA means any information that identifies an individual and relates to at least one of the following: • The indi
