Because PHI must remain encrypted at rest, make sure you are using full-disk encryption on any device that has research data containing PHI on it. Physical, and technical safeguards that complement those UITS already has in place.Īt Indiana University, never store files containing sensitive institutional data, especially protected health information ( PHI) regulated by the Health Insurance Portability and Accountability Act of 1996 ( HIPAA), on your desktop workstation, laptop, USB flash drive, tablet, smartphone, or other mobile device unless the files are properly encrypted on the device, and your senior executive officer or the IU Institutional Review Board (IRB) has given prior written approval. You may use this system or service for work involving data that contain PHI only if you institute additional administrative, However, using this system or service does not fulfill your legal responsibilities for protecting the privacy and security of data that contain PHI. This UITS system or service meets certain requirements established in the HIPAA Security Rule thereby enabling its use for work involving data that contain protected health information ( PHI).

To request a new institutional storage account, fill out the Institutional storage request form.

Zoom recording location