Drexel University Clinical Covered Entities

HIPAA Privacy Policies and Procedures

The following policies are supported by Privacy Program Services, all of which you can find in the Privacy section of the Policy Directory. If you have any questions about the interpretation or implementation of these policies, please contact us at privacy@drexel.edu. 

• PPS-01 Health Information Management Policy
• PPS-01A HIPAA Hybrid Entity Designation
• PPS-02 Minimum Necessary
• PPS-03 Sharing Data with External Entities
• PPS-04 Individual Right to Access Individually Identifiable Health Information
• PPS-05 Individual Right to Request Correction Individually Identifiable Health Information
• PPS-06 Authorization
• PPS-07 Patient Complaint Process
• PPS-08 Training Requirements
• PPS-09 Incident Reporting
• PPS-10 Responding to External Investigations and Inquiries
• PPS-11 Accounting of Disclosures
• PPS-12 Fundraising and Marketing
• PPS-14 Restrictions Requested by Patient
• PPS-15 Notice of Privacy Practices
• PPS-16 Fee for Copying Records
• PPS-17 Identification of Patient or Authorized Representative Over the Phone
• PPS-18 Password and System Confidentiality
• PPS-19 Patient List
• PPS-20 Use of PHI in DU Classroom or Internal Web-based Medical Education
• PPS-21 Destruction of EPF Printed Material
• PPS-22 Sale of PHI
• PPS-23 Student Immunization Policy
• PPS-24 Breach Investigation and Notification Policy
• PPS-25 Decedents
• PPS-26 Business Associate Policies (with attachments)
• PPS-27 De-Identification of PHI for Use in DU Classroom or Internal Web-based Medical Education
• PPS-28 Students as Business Associates

Privacy Policies Implemented by Other Departments

Some University privacy policies and procedures are implemented by other departments. Learn more using the links below:

• Family Education Rights and Privacy Act Policy: Office of the University Registrar
• Advising Interaction Notes Policy: Provost's Office
• Confidentiality Policy (HR-50): Human Resources
• Personnel Records Policy (HR-41): Human Resources
• Records Management Policy: Office of General Counsel
• Code of Conduct: Compliance Program Services

Related Resources

Privacy Policy Definitions

Policy Directory

Notice of Privacy Practices