A comprehensive HIPAA policy review project began in 2025. The initiative is ongoing and focuses on revising all HIPAA Privacy & Security policies, most of which have not been updated since 2020 or before.
In addition to ensuring regulatory compliance, the project aims to simplify language using plain-language principles, remove procedural content better suited for guidance documents, remove non-policy-specific boilerplate language, and consolidate policies to reduce redundancy and improve usability.
Please see below for a summary of substantive policy changes to date:
UW-100/HIPAA Policy 1.1, Designation of the UW-Madison Health Care Component (UW HCC)
- Jan ’25
- Inclusion of Environment Health & Safety (EHS) into the HCC
- Removal of Administrative Information Management Services
- Updated language to clarify those included in the HCC on a temporary basis
UW-101/HIPAA Policy 1.2, Designation of the University of Wisconsin Affiliated Covered Entity (UW ACE)
- May ’25
- Updated language for improved simplicity, clarity, and usability
UW-106/HIPAA Policy 3.5, Uses and Disclosures of Protected Health Information for Education and Training
- Sep ’25
- Updated language and formatting throughout for improved simplicity, clarity, and usability