Critical Health Data Areas

IU Critical Health Data Areas

The University HIPAA Privacy and Security Compliance Program has identified a number of areas within Indiana University that must comply with the Rules. Areas that must comply with the HIPAA Privacy and Security Rules are known as IU Critical Health Data Areas.

IU Critical Health Data Areas may have access to protected health information (PHI) because the area or unit:

  1. Is a covered healthcare component (healthcare provider or a health plan);
  2. Provides services to covered healthcare components or other covered entities and as such receives PHI to perform those services; or
  3. Uses PHI for education or research purposes.

Covered healthcare components

  • IU School of Dentistry
  • IU School of Optometry
  • IU Health Center—Bloomington
  • IU Indianapolis Campus Health
  • Speech and Hearing Clinics—Bloomington
  • IU's Health Benefit Plans
  • Lafayette Street Family Health Clinic—Fort Wayne (as of 7/1/18)
  • Dental Hygiene Clinic—Fort Wayne (as of 7/1/18)