All data and information resources of the SEHD are subject to University of Colorado's IT Security Program policy, APS-6005.

Any employee, student, trainee, or volunteer associated with UCD isresponsiblefor reporting known or suspected violations of the UCD privacy policies to the Privacy Officer and for reporting known or suspected violations of the UCD security policies to the Security Officer. Violations can be reported by e-mailing HIPAA@ucdenver.edu. If after an investigation the Privacy Officer determines a violation has taken place they will work with the appointing authority to determine the appropriate sanctions as detailed in UCD HIPPA Policy 1.5.