Health Insurance Portability and Accountability Act (HIPAA)

The University of Montana maintains Policy 440 - Health Insurance Portability and Accountability Act (HIPAA) to protect the privacy of individual health information. UM is defined as a “hybrid entity” under HIPAA regulations because it is a covered entity whose activities include both covered and non-covered functions. Whenever a project involves obtaining protected health information (PHI) from a “covered entity,” as defined by HIPAA, proper authorization must be obtained from each individual. The University of Montana has identified the following units as health care components:

  • Curry Health Center Services 
  • DeWit RiteCare Speech, Language, and Hearing Clinic
  • Health Center Pharmacy
  • MonTech (includes Montana Adaptive Equipment and Montana Assistive Technology Programs)
  • New Directions Program
  • Rhinehart Athletic Training Center
  • UM Physical Therapy Clinic (formerly Nora Staael Evert Clinic)

Policies and Procedures

Related Links