Differences

This shows you the differences between two versions of the page.

--- policy:data_privacy:sanctions_for_violations [2019/04/05 20:54] – tonyromero
+++ policy:data_privacy:sanctions_for_violations [2019/05/21 22:03] (current) – tonyromero
@@ Line 5: / Line 5: @@
 ==== University of Colorado IT Security Program Policy ====
-All data and information resources of the SEHD are subject to University of Colorado's IT Secuirty Program policy, [[https://www.cu.edu/ope/aps/6005|APS-6005]].
+All data and information resources of the SEHD are subject to University of Colorado's IT Security Program policy, [[https://www.cu.edu/ope/aps/6005|APS-6005]].
-==== University of Colorado Denver Security Management HIPPA Policy ====
+==== University of Colorado Denver HIPPA Policy ====
-The most secure SEHD data are subject to the [[http://www.ucdenver.edu/research/ORC/HIPAA/Pages/Policy.aspx|UCD HIPPA policy]].
+<font 14px/Arial,Helvetica,sans-serif;;inherit;;inherit>Any employee, student, trainee, or volunteer associated with UCD is</font><font 14px/Arial,Helvetica,sans-serif;;inherit;;inherit>responsible</font>for reporting known or suspected violations of the UCD privacy policies to the Privacy Officer and for reporting known or suspected violations of the UCD security policies to the Security Officer. Violations can be reported by e-mailing HIPAA@ucdenver.edu. If after an investigation the Privacy Officer determines a violation has taken place they will work with the appointing authority to determine the appropriate sanctions as detailed in [[http://www.ucdenver.edu/research/Research Administration Documents/1.5 Workforce Sanctions.pdf|UCD HIPPA Policy 1.5]].