ANNOUNCEMENTS
Please be aware that beginning December 23, 2024, we must comply with updates to the HIPAA Privacy Rule to Support Reproductive Health Care Privacy. The updated HIPAA Privacy Rule requires a covered entity (or business associate) to obtain a signed attestation that record requests are not for a prohibited purpose when it receives a request for medical records for any of the following purposes:
-
Health oversight activities.
-
Judicial and administrative proceedings.
-
Law enforcement purposes.
-
Disclosures to coroners and medical examiners
Please note that an attestation is not required for requests that are accompanied by a valid patient authorization requesting such records.
The Attestation form can be found here:
Form 5031 Attestation Form for Reproductive Health Information
For informational videos about these updates, go to Staff Overview of Reproductive Health Changes and Management Overview of Reproductive Health Changes.
Please email HIPAA@yale.edu with any questions regarding compliance with the updated Rule.
Guidance on Artificial Intelligence (AI)
At Yale University, we are committed to providing quality health care which includes respecting patients’ and clinical research subjects’ rights to maintain the privacy of their health information and ensuring appropriate security of all protected health information. The standards for protecting patient health information are described in the federal law known as the Health Insurance Portability and Accountability Act (HIPAA). This web site provides information and guidance on the policies and procedures related to HIPAA compliance at Yale University.