HIPAA is the acronym for the Health Insurance Portability and Accountability Act of 1996.  HIPAA is arguably the single most significant Federal legislation affecting the health care industry since the creation of the Medicare and Medicaid programs in 1965.  Under title II of HIPAA, Congress passed the Administrative Simplification provisions of HIPAA, among other things, to protect the privacy and security of protected health information (PHI), and promote efficiency in the health care industry through the use of standardized electronic transactions.

The Privacy Rule sets the standards for, among other things, who may have access to PHI, while the Security Rule sets the standards for ensuring that only those who should have access to EPHI (or Electronic PHI) will actually have access.  The main impetus behind these rules is to protect the confidentiality, integrity, and availability of PHI in any form: written, verbal, or electronic.

It is the responsibility of all NYU Medical Center faculty, staff, students, and affiliates to ensure that our policies, procedures, and standards are fully implemented.  This web site has been developed to give you the resources you need to ensure that NYU Medical Center remains compliant with the law.

HIPAA Hospital Compliance

HIPAA School/FGP Compliance