ANNOUNCEMENTS

Please be aware that beginning December 23, 2024, we must comply with updates to the HIPAA Privacy Rule to Support Reproductive Health Care Privacy.  The updated HIPAA Privacy Rule requires a covered entity (or business associate) to obtain a signed attestation that record requests are not for a prohibited purpose when it receives a request for medical records for any of the following purposes:

  • Health oversight activities.

  • Judicial and administrative proceedings.

  • Law enforcement purposes.

  • Disclosures to coroners and medical examiners

The Attestation form can be found here: 

Form 5031 Attestation Form for Reproductive Health Information 

For informational videos about these updates, go to Staff Overview of Reproductive Health Changes and Management Overview of Reproductive Health Changes.

Please email HIPAA@yale.edu with any questions regarding compliance with the updated Rule.

Guidance on Artificial Intelligence (AI)

21st Century Cures Act FAQ

At Yale University, we are committed to providing quality health care which includes respecting patients’ and clinical research subjects’ rights to maintain the privacy of their health information and ensuring appropriate security of all protected health information. The standards for protecting patient health information are described in the federal law known as the Health Insurance Portability and Accountability Act (HIPAA). This web site provides information and guidance on the policies and procedures related to HIPAA compliance at Yale University.