Privacy and Security

• Policy

  Access to Electronic Information Policy
• Resource

  Additional Guidance on Data Protection Standards
• Policy

  Alumni Privacy Policy
• Policy

  Applicants to Boston University Jobs in the United States – Privacy Notice

  Last Modified: 09/17/2018
• Procedure

  BU Desktop Asset Management Policy Guide
• Procedure

  BU Google Apps Acceptable Use and Data Security
• Procedure

  BU OneDrive Security Guide for FERPA and HIPAA Policy
• Policy

  Copyright Violation Policy
• Policy

  Crowdfunding Policy

  Last Modified: 10/21/2017
• Policy

  Data Access Management Policy

  Last Modified: 04/01/2019
• Policy

  Data Classification Policy

  Last Modified: 04/19/2019
• Policy

  Data Lifecycle Management Policy

  Last Modified: 11/19/2020
• Guide

  Data Protection Standards
• Guide

  Digital Millennium Copyright Act (DMCA) and Copyright Infringement
• Procedure

  Digital Millennium Copyright Act Procedures
• Policy

  Digital Privacy Statement

  Last Modified: 08/03/2018
• Guide

  Education, Compliance, and Remediation

  Last Modified: 04/19/2018
• Policy

  Family Educational Rights and Privacy Act (FERPA) Policy
• Procedure

  Google Drive Security Guide for FERPA
• Policy

  HIPAA Policy Manual – Privacy and Security of Protected Health Information for BU Healthcare Provider Covered Components

  Last Modified: 11/01/2018
• Procedure

  Human Subjects Process and Policies
• Policy

  Identity and Access Management Policy

  Last Modified: 04/01/2019
• Procedure

  InCommon Federation: Participant Operational Practices
• Policy

  Information Security Policy

  Last Modified: 04/19/2018
• Policy

  IS&T and BUMC IT Data Center Policy
• Guide

  Minimum Security Standards

  Last Modified: 11/19/2019
• Policy

  Network Security Monitoring Policy

  Last Modified: 01/12/2018
• Procedure

  Office 365/SharePoint Online Security Policy
• Guidelines

  PCI Data Security Standards (for accepting credit cards) (5.2.3)
• Policy

  Policy on Responsibility for Securing Computing Resources
• Policy

  Policy Violation Notification Procedure
• Instructions and Forms

  Releases for Photos and Videos
• Policy

  Safeguarding Information – Gramm-Leach-Bliley Act (GLBA)
• Procedure

  Social Media Guidelines
• Policy

  Universal Identity Theft
• Policy

  Vulnerability Management Policy

Protected Health Information - HIPAA and Research

• Guide

  HIPAA Information for Charles River Campus Researchers

Protected Health Information - HIPAA for BU Health Plans

• Policy

  HIPAA Policies for BU Health Plans Manual – Privacy and Security of Protected Health Information for BU Health Plans
• Policy

  HIPAA Policies for BU Health Plans: Appendix A, Contacts
• Policy

  HIPAA Policies for BU Health Plans: Introduction, HIPAA and the Boston University Health Plans
• Policy

  HIPAA Policies for BU Health Plans: Policy 1, Basics
• Policy

  HIPAA Policies for BU Health Plans: Policy 2: Individual Responsibilities for Safeguarding PHI
• Policy

  HIPAA Policies for BU Health Plans: Policy 3, Routine Use and Disclosure of PHI
• Policy

  HIPAA Policies for BU Health Plans: Policy 4, Non-Routine Uses and Disclosures of PHI without Authorization; Prohibited Uses
• Policy

  HIPAA Policies for BU Health Plans: Policy 5, Authorizations
• Policy

  HIPAA Policies for BU Health Plans: Policy 6, Individuals’ Rights Under HIPAA
• Policy

  HIPAA Policies for BU Health Plans: Policy 7, Breaches
• Policy

  HIPAA Policies for BU Health Plans: Policy 8, Security Policy
• Policy

  HIPAA Policies for BU Health Plans: Policy 9, Definitions

Protected Health Information - HIPAA for BU Healthcare

• Policy

  HIPAA Health Care Providers Policies Appendix A: Contacts

  Last Modified: 11/01/2018
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Introduction – HIPAA at Boston University

  Last Modified: 11/01/2018
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 1, HIPAA Basics

  Last Modified: 11/01/2018
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 10, Exceptions

  Last Modified: 11/01/2018
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 11, Definitions

  Last Modified: 11/01/2018
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 2, Individual Responsibilities for Safeguarding PHI

  Last Modified: 10/13/2020
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 3 – Using PHI in Treatment, for Payment and for Health Care Operations; Business Associates

  Last Modified: 11/01/2018
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 4, Uses Required or Permitted by Law; Prohibited Uses of PHI

  Last Modified: 11/01/2018
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 5, Situations in which Authorizations are Necessary

  Last Modified: 11/01/2018
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 6, Individuals’ Rights under HIPAA

  Last Modified: 11/01/2018
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 7, Breaches

  Last Modified: 11/01/2018
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 8, HIPAA Security Program

  Last Modified: 10/13/2020
• Policy

  HIPAA Policies for Healthcare Providers at Covered Components: Policy 9, Documentation and Retention

  Last Modified: 11/01/2018