UT Dallas has designated itself as a Hybrid Entity as defined by the 45 CFR § 164.105. The UT Dallas healthcare component that is required to comply with the HIPAA Privacy Rule consists of:
Callier Center for Communication Disorders. The Callier Center is a health care provider, as defined by 45 CFR § 160.103. The other offices designated below provide services to the Callier Center which require access to protected health information (PHI) maintained on behalf of the Callier Center. For purposes of this manual, references to the Callier Center include all other offices providing support and service to the Callier Center.
The Office of Audit and Consulting Services. The University’s internal auditors require access to PHI maintained inside and outside of Callier to ensure that the University offices are providing audit and assurance services to UT Dallas, and helping enhance operations, governance, risk management, and control processes. To the extent certain auditors must access Callier Center PHI for this purpose, the Office of Internal Audit is designated as a Business Associate of the Callier Center.
The Office of Budget and Finance. Employees within the Accounting and Budget departments require access to Callier Center PHI to perform account reconciliations and other business functions on behalf of Callier. To the extent the Office requires access to or maintains Callier Center PHI, the Office of Budget and Finance is designated as a Business Associate of the Callier Center.
The Office of Development and Alumni Relations. The HIPAA Privacy Standards permit a Covered Entity to use patient demographic information, health insurance status, date of patient healthcare services, general department providing the services, treating provider information, and general outcome information for the purpose of contacting patients or a patient’s personal representative to conduct fundraising activities. To the extent that it requires access to this PHI from the Callier Center for the fundraising purposes permitted by the HIPAA Privacy Standards, and subject to the restrictions provided by the HIPAA Privacy Standards and this Manual, the Office of Development and Alumni Relations is designated as a Business Associate of the Callier Center.
The Office of Information Security. The University’s Chief Information Security Officer serves as the University’s HIPAA Security Officer. To the extent that the Security Officer and designated staff need access to records that contain PHI within Callier, as well as Callier Center PHI maintained by other offices outside of Callier that perform services for it as its Business Associates, to ensure that all such PHI is being maintained confidentially and securely as required by HIPAA and to perform other Information Security duties, the Office of Information Security is designated as a Business Associate of the Callier Center.
The Office of Information Technology. This Office provides technical support for the information technology infrastructure of the University, including Callier. To the extent that Information Technology requires access to the Callier Center’s PHI in its databases and information technology applications in order to support information technology services to Callier, the Office of Information Technology is designated as a Business Associate of the Callier Center.
The Office of Institutional Compliance, Equity, and Title IX Initiatives. The University’s compliance personnel facilitate compliance training, assist compliance programs in UT Dallas designated high-risk areas to ensure sufficient monitoring, training and reporting are in place, and assist the University to comply with federal, state, and local policies and procedures. To the extent that the Office requires access to Callier Center PHI for these purposes, the Office of Institutional Equity and Compliance is designated as a Business Associate of the Callier Center.
The Office of Legal Affairs. The Office of Legal Affairs provides legal counsel and representation to the University that may require access to PHI held by the Callier Center or by other University Offices on behalf of the Center. The University’s records manager is part of the
Office of Legal Affairs and is responsible for maintaining the University’s records in accordance with the University’s records retention policies and applicable law. The records manager requires access to PHI, including PHI that is maintained by University offices as Business Associates of Callier, that may be stored in paper and electronic formats in order to ensure proper handling and disposition of such records. To the extent that the Center or other University offices require representation or counsel from the University Attorney that requires disclosure or maintenance of Callier Center PHI, the University Attorney, and the staff reporting to the University Attorney who require access to Callier Center PHI to provide support services to the University Attorney, are designated as a Business Associate of the Callier Center.
The Office of Institutional Success and Decision Support. The Office of Institutional Success and Decision Support (OISDS) provides support to the University through effective planning, institutional research and evaluation. Such support includes gathering information and data maintained within the University’s Financial Management Solution (FMS) system at the request of other offices and departments within the UT Dallas health care component. The information included within FMS may include PHI. To the extent OISDS requires access to PHI from the Callier Center for institutional purposes, the Office of Institutional Success and Decision Support is designated as a Business Associate of the Callier Center.
All UT Dallas entities included in this designation are required to comply with the UT Dallas policies and procedures for compliance with the HIPAA Privacy and Security Rules as well as its responsibility for compliance with the Breach Rule and any other requirement applicable to a HIPAA Covered Entity.
HIPAA Regulatory Citation: 45 CFR § 164.105
Effective: 04/04/2013
Revised: 11/06/2024, 12/08/2020, 10/30/2020, 03/03/2017, 06/06/2015, 03/10/2015,10/09/2013, 06/10/2013
Reviewed: 10/17/2022, 12/11/2020
Heather Zimmerman, HIPAA Privacy Officer
UT Dallas Callier Center
