HIPAA

The Health Insurance Portability and Accountability Act of 1996, Public Law 104-191, and its Administrative Simplification provisions, 45 C.F.R. 160, et seq., 45 C.F.R. 162, et seq., and 45 C.F.R. 164, et seq., collectively referred to hereafter as HIPAA, have established national standards for electronic health care transactions as well as the security and privacy of health data. HIPAA and its implementing regulations apply to individuals and organizations that are considered covered entities. TTU has certain college departments (health care components) which provide health care-related education and services and are considered covered entities, including, but not limited to, psychologists, dieticians, and other licensed clinicians who engage in assembling collecting, analyzing, using, evaluating, storing, or transmitting protected health information (PHI). These departments require assistance to comply with privacy and security standards pertaining to health information, which includes training and monitoring for oversight concerning access to and use and disclosure of PHI and compliance with requirements to give notice to and obtain authorizations from individuals whose PHI may be subject to disclosure. 

The TTU and TTUHSC Offices of Institutional Compliance work collaboratively to ensure an effective health care privacy compliance program. This includes the ongoing identification of TTU health care components, the training of designated personnel on HIPAA privacy responsibilities, the periodic reviews of health care components' compliance with applicable federal and state requirements, and the investigation of reported HIPAA violations. 

HEALTH CARE COMPONENTS

The departments listed below have been designated as health care components, which require compliance with HIPAA privacy and security standards. 

• Accounting and Financial Systems Management
• Burkhart Center for Autism Education and Research
• Emergency Management
• Environmental Toxicology
• Family Therapy Clinic
• General Counsel
• Information Technology
• Institutional Compliance
• Nutrition and Metabolic Health Initiative
• Psychology Clinic
• Texas Tech Therapeutic Riding Center

REPORTING

A known or suspected HIPAA violation may be reported to the following resources:

• The TTU or TTUHSC Offices of Institutional Compliance
• The supervising manager or administrator of the involved area or department
• EthicsPoint (anonymous reporting system)
• The TTU System Office of Audit Services

OPERATING POLICIES

• TTU OP 10.21

CONTACT

If you have any questions or would like additional information on HIPAA, please contact the TTU Office of Institutional Compliance.