2,654
edits
Contracts: Difference between revisions
Jump to navigation
Jump to search
m
no edit summary
mNo edit summary |
mNo edit summary |
||
| Line 72: | Line 72: | ||
====Academic Agreements==== | ====Academic Agreements==== | ||
Academic Affiliation agreements are required for all organizations accepting UNMC students and for all students who come to UNMC from other educational institutions for clinical experience [mailto:jobshadow@nebraskamed.com (Office of Health Professions Education)]. Academic Affiliation Agreements are approved by the [https://www.unmc.edu/academicaffairs/about/index.html Office of the Vice Chancellor for Academic Affairs]. Contact your college representative responsible for drafting and negotiating Academic Affiliation Agreements or Academic Affairs at 402-559-5130 with questions. | Academic Affiliation agreements are required for all organizations accepting UNMC students and for all students who come to UNMC from other educational institutions for clinical experience [mailto:jobshadow@nebraskamed.com (Office of Health Professions Education)]. Academic Affiliation Agreements are approved by the [https://www.unmc.edu/academicaffairs/about/index.html Office of the Vice Chancellor for Academic Affairs]. Contact your college representative responsible for drafting and negotiating Academic Affiliation Agreements or Academic Affairs at 402-559-5130 with questions. | ||
==Data Security/Protected Health Information== | |||
UNMC as part of an [https://www.unmc.edu/hipaa/about/affiliated-covered-entity-structure.pdf Affiliated Covered Entity] is obligated to protect patient information under HIPAA. Any UNMC contract that involves the use of protected health information (PHI) for services, research and other needs to ensure that procedures and policies are followed to secure PHI. <br /> | UNMC as part of an [https://www.unmc.edu/hipaa/about/affiliated-covered-entity-structure.pdf Affiliated Covered Entity] is obligated to protect patient information under HIPAA. Any UNMC contract that involves the use of protected health information (PHI) for services, research and other needs to ensure that procedures and policies are followed to secure PHI. <br /> | ||
<br /> | <br /> | ||
When contracting outside UNMC and Nebraska Medicine for equipment purchases or transfer of PHI electronically, a security review is required by [https://wiki.unmc.edu/index.php/Privacy/Information_Security Information Security]. | When contracting outside UNMC and Nebraska Medicine for equipment purchases or transfer of PHI electronically, a security review is required by [https://wiki.unmc.edu/index.php/Privacy/Information_Security Information Security]. | ||
==Protected Student Financial Information (PSFI)== | |||
[https://www.nebraska.edu/docs/president/26%20Information%20Security%20Plan%20%28GLB%20Compliance%29.pdf Executive Memorandum No. 26] describes protections of Student Financial Information required under Gramm Leach Bliley Act (GLBA), and protection of credit card information received in the course of business. When an activity requires use of protected financial information under Executive Memorandum No. 26, [https://www.nebraska.edu/docs/president/26%20Information%20Security%20Plan%20%28GLB%20Compliance%29.pdf a GLBA Addendum must be added to the contract] (the Addendum is attached as an exhibit to Memorandum 26). | [https://www.nebraska.edu/docs/president/26%20Information%20Security%20Plan%20%28GLB%20Compliance%29.pdf Executive Memorandum No. 26] describes protections of Student Financial Information required under Gramm Leach Bliley Act (GLBA), and protection of credit card information received in the course of business. When an activity requires use of protected financial information under Executive Memorandum No. 26, [https://www.nebraska.edu/docs/president/26%20Information%20Security%20Plan%20%28GLB%20Compliance%29.pdf a GLBA Addendum must be added to the contract] (the Addendum is attached as an exhibit to Memorandum 26). | ||
==Business Associate Agreement== | |||
A [https://wiki.unmc.edu/index.php/Business_Associate_Agreements_and_Addendums_Procedures Business Associate Agreement] is required in association with the contract for equipment, services or other where a person or entity is performing functions or activities on behalf of a covered entity (UNMC, Nebraska Medicine, College of Dentistry, etc.) or a subcontractor that creates, receives, maintains or transmits PHI on behalf of the covered entity. The [https://www.unmc.edu/hipaa/forms/index.html Business Associate Agreement template] can be located at https://www.unmc.edu/hipaa/forms/index.html. Refer to the [https://www.unmc.edu/hipaa/forms/docs/wedi-ba-decision-tree-v2.pdf Business Associate Decision Tree] as needed. | A [https://wiki.unmc.edu/index.php/Business_Associate_Agreements_and_Addendums_Procedures Business Associate Agreement] is required in association with the contract for equipment, services or other where a person or entity is performing functions or activities on behalf of a covered entity (UNMC, Nebraska Medicine, College of Dentistry, etc.) or a subcontractor that creates, receives, maintains or transmits PHI on behalf of the covered entity. The [https://www.unmc.edu/hipaa/forms/index.html Business Associate Agreement template] can be located at https://www.unmc.edu/hipaa/forms/index.html. Refer to the [https://www.unmc.edu/hipaa/forms/docs/wedi-ba-decision-tree-v2.pdf Business Associate Decision Tree] as needed. | ||
==Additional Information== | ==Additional Information== | ||