confidentiality requirements; professional ethical standards; and applicable patient -care and information-security requirements. When multiple requirements apply, students must comply with the most restrictive applicable confidentiality, privacy, security, or clinical -site requirement. Nothing in this policy limits or replaces an applicable law, University policy, or clinical- affiliate requirement. 3. NLU University Policy Alignment This PA Program policy supplements NLU’s University-wide requirements. Student privacy rights are generally governed by FERPA, and the Student Guidebook and University Catalog remain the primary sources for University-wide policy. NLU also maintains a process for authorization to re lease protected health information and identifies HIPAA and FERPA as applicable privacy frameworks. NLU PA students are required to comply with both University requirements and PA Program- specific confidentiality requirements. 4. Definition of Confidential and Protected Information For purposes of this policy, confidential or protected information includes, but is not limited to, the following categories. Patient information: name, date of birth, address, telephone number, medical record number, Social Security number, diagnosis, medical history, medication information, laboratory results, imaging, treatment information, procedures, photographs, videos, voice recordings, genetic information, insurance and billing information, and any information that could reasonably identify a patient. Student information: grades, academic records, remediation information, progression decisions, disability or health information, personal identifying information, student conduct matters, advising information, clinical evaluations, personal communications, and other information protected by FERPA or University policy. Clinical and institutional information: clinical-site proprietary information, preceptor information, staff information, internal communications, passwords, security credentials, facility procedures, non-public operational information, and any information designated confidential by NLU or a clinical affiliate. 5. HIPAA Compliance The NLU PA Program incorporates the following requirement from its clinical affiliatio n agreements: students shall comply with the applicable provisions of the Health Insurance Portability and Accountability Act of 1996, and shall take all measures necessary to ensure
90
Powered by FlippingBook