To request Zoom Health status, fill out the IU Zoom Health request form. If you are not sure, ask your department or school IT Pro for help. Because PHI must remain encrypted at rest, make sure you are using full-disk encryption on any device that has research data containing PHI on it. To request a new institutional storage account, fill out the Institutional storage request form.Īt Indiana University, never store files containing sensitive institutional data, especially protected health information ( PHI) regulated by the Health Insurance Portability and Accountability Act of 1996 ( HIPAA), on your desktop workstation, laptop, USB flash drive, tablet, smartphone, or other mobile device unless the files are properly encrypted on the device, and your senior executive officer or the IU Institutional Review Board (IRB) has given prior written approval.

Distributed administrative or technical teams working directly with patient data.Clinical researchers interviewing participants or participant teams as part of research projects.Distributed research team working sessions with patient data.Indiana University and Zoom have signed a Business Associates Agreement (BAA) to facilitate private, secure online collaborations for research, teaching, or administration involving the transmission of protected health information (PHI).įollowing are some examples of Zoom collaborations that involve PHI and should be conducted using a Zoom Health account:

Physical, and technical safeguards that complement those UITS already has in place.įor guidance on division of responsibility when using a UITS system approved for PHI, see Shared responsibility model for securing PHI on UITS systems.

You may use this system or service for work involving data that contain PHI only if you institute additional administrative,

However, using this system or service does not fulfill your legal responsibilities for protecting the privacy and security of data that contain PHI. This UITS system or service meets certain requirements established in the HIPAA Security Rule thereby enabling its use for work involving data that contain protected health information ( PHI).

Iu zoom