HIPAA Policies
Our team is currently updating its HIPAA policies and procedures to ensure they remain aligned with the latest regulatory requirements and best practices.
During this revision period, existing policies remain in effect, and staff should continue to follow all current guidelines. We will notify all teams as soon as the updated materials are finalized and available for review. Thank you for your continued commitment to protecting patient privacy and maintaining compliance.
If you have a question, please reach out to the HIPAA Privacy Officer at hipaa@nau.edu.
Northern Arizona University (NAU) is committed to protecting individuals’ health information in compliance with applicable laws and regulations, including the Health Insurance Portability and Accountability Act of 1996 (HIPAA).
HIPAA imposes requirements relating to the privacy and security of “Protected Health Information,” or “PHI,” from covered entities which are called Health Care Components at NAU.
Student Health Records
Family Educational Rights and Privacy Act (FERPA) is a federal law designed to protect the privacy of student education records. Under FERPA, student records maintained by Health Care Components are either “Treatment Records” or “Education Records.” Treatment records are records that are made or maintained by a health care professional(s); are used only for your medical or psychological treatment; and are available only to treatment providers. When treatment records are shared with anyone else (such as billing insurance) they become a part of a student’s education records under FERPA.
Student health records maintained by NAU’s Health Care Components are considered education records or treatment records under FERPA and are excluded from HIPAA coverage.