Policies
** NOTE: If you have access to the UNC Health PolicyStat System, click on the policy title to view. The PDF links are available for those who are not able to login.**
Governance: Privacy Policy Applicability Across the UNC Health and UNC School of Medicine
- UNC Health Covered Entity Explained and OHCA and ACE Designations (PDF)
- Designation of UNC Health Chief Privacy Officer and Chief Security Officer (PDF)
Protected Health Information (PHI)
Investigations, Sanctions, Breach Reporting and Whistleblower Protections
- Investigating and Responding to Privacy Incidents and Complaints (PDF)
- Sanctions for Violations of Privacy Policies (PDF)
- Duty to Report Suspected Incidents, Duty to Cooperate with Investigation and Duty to Mitigate Harm (PDF)
- Breach Notification (PDF)
- Investigation of Complaints by Secretary of the Department of Health and Human Services (PDF)
- Whistleblowers and Anti-Retaliation Policy (PDF)
Health Information, Patient Rights and Medical Records
- Personal Representatives (PDF)
- Retention of the Designated Record Set, the Legal Health Record, and Financial Records (PDF)
- Designated Record Set (UNC MC) (PDF)
- Verification of Identity (PDF)
- Patient Right of Access to Inspect and Obtain a Copy of PHI (PDF)
- Right to Request Amendment to PHI (PDF)
- Right to Accounting of Disclosure (PDF)
- Right to Request Restrictions on Uses and Disclosures of PHI (PDF)
- Right to Confidential Communications (PDF)
- Copy Requests and Charges for PHI (PDF)
- Disposal/Destruction of PHI (PDF)
Transportation of Paper PHI and Transmission of Electronic PHI
- Transportation of PHI on and Off-Site (PDF)
- Fax Transmission of PHI (PDF)
- Electronic Communication of PHI – Texting and Emailing PHI – Coming Soon!
Uses and Disclosures of PHI
- Notice of Privacy Practices (PDF)
- Uses and Disclosures of PHI Requiring Authorization (PDF)
- Uses and Disclosures of PHI Not Requiring Patient Authorization (PDF)
- Uses and Disclosures of PHI for Marketing (PDF)
- Use and Disclosure of PHI of Deceased Individuals (PDF)
- Release of PHI for Workers’ Compensation Purposes (PDF)
- Use and Disclosure of PHI for Specialized Government Functions (PDF)
- Public Health Activities – Disclosures of PHI (PDF)
- Uses and Disclosures: Friends and Family (PDF)
- Uses and Disclosures of PHI for Fundraising Purposes (PDF)
- Use and Disclosure of Immunization Records (PDF)
- Sale of PHI (PDF)
Training
Business Associates
Safeguards
- Safeguards of Portable Devices and Electronic Media Containing ePHI – Coming Soon!
- Information Security (PDF)
- Administrative, Physical and Technical Safeguards (PDF)
- Physical Safeguards (PDF)
- Social Security Number Privacy – Coming Soon!
- Electronic Patient Information Access and Auditing of Access (PDF)
Administrative Policies
- Changes in Policies (PDF)
- Documentation and Retention of Records (PDF)
- Preemption of State Law (PDF)