The University of Arizona

HIPAA Policy, Procedure & Guidance

Hotline Graphic

HIPAA Privacy Links

Report a Privacy Incident

Submit a Business Associate Agreement Request

HIPAA Data Reference Guide


Department Email

John Howard, JD
Director, HIPAA Privacy Program
HIPAA Privacy Officer

Bill Murphy, CISSP
HIPAA Security Specialist

Suzie Williams
HIPAA Privacy Analyst

Fax: 520.621.3355

Street Address:
1618 E. Helen Street
Tucson, AZ 85719

Mailing Address:
Attn: Privacy Officer
The University of Arizona
PO Box 210409
Tucson, AZ 85721

*Subscribe to the HIPAA Program listserv

HIPAA in the News
Enforcement Activities
Office for Civil Rights YouTube Channel


The University of Arizona Privacy, Security and Breach Notification Policy 2013 (Link)

Procedures and Standards

  • 100: Health Care Component Designation (PDF)
  • 110: Authority and Responsibilities (PDF)
  • 120: Requirements of Designated Health Care Components (PDF)
  • 130: Breach of Protected Health Information (PDF)
  • 140: Complaints and Investigations (PDF)
  • 150: Training (PDF)
  • 160: Notice of Privacy Practices (PDF)
  • 170: Business Associate Agreements (PDF)
  • 180: Limited Data Sets and Data Use Agreements (PDF)
  • 190: Access of an Individual to Protected Health Information (PDF)
  • 200: Individual's Right to Request an Accounting of Disclosures (PDF)
  • 210: Individual's Right to Request Amendments (PDF)
  • 220: When an Authorization is Required (Authorization Checklist) (PDF)
  • 230: Documentation Retention and Destruction (PDF)
  • 240: Minimum Necessary Standards for Uses and Disclosures (PDF)
  • 250: Opportunity to Agree or Object Required for Certain Uses and Disclosures (PDF)
  • 260: Permissible Uses and Disclosures (PDF)
  • 270: Individual's Right to Request Restrictions & Confidential Communications (PDF)