All data and information resources of the SEHD are subject to University of Colorado's IT Secuirty Program policy, APS-6005.

Any employee, student, trainee, or volunteer associated with UCD is responsiblefor reporting known or suspected violations of the UCD privacy policies to thePrivacy Officer and for reporting known or suspected violations of the UCDsecurity policies to the Security Officer. Violations can be reported by e-mailingHIPAA@ucdenver.edu. If after an investigation the Privacy Officer determines a violation has taken place they will work with the appointing authority to determine the appropriate sanctions as detailed in UCD HIPPA Policy 1.5.