NAU’s Healthcare Components

Northern Arizona University has designated itself as a Hybrid Entity as defined by HIPAA (see 45 CFR 164.103). Pursuant to the statute and regulations, organizations that are Hybrid Entities must designate certain segments of their organizations as Health Care Components, Health Care Plans, and/or a Health Care Clearinghouse and take all reasonable steps to assure compliance within these components with all applicable HIPAA Privacy, Security, and Breach Notification Rules and regulations promulgated in the Health Insurance Portability and Accountability Act (HIPAA) and Title XIII, Subtitle D of the Health Information Technology for Economic and Clinical Health (HITECH) Act (HIPAA and HITECH may be collectively referred to as HIPAA).

The University Health Care Components consist of those programs that meet the definition of “Covered Entity” and have been designated by the University Privacy Officer. Additionally, organizations performing work for or on behalf of Covered Entities, and which meet the definition of a Business Associate, must establish Business Associate Agreements and comply with the applicable HIPAA rules. Northern Arizona University Covered Entities are as follows: