*** Content Under Review ***  

*** See www.compliance.wisc.edu/hipaa for up-to-date content. ***

The UW-Madison HIPAA Compliance Program is updating policies, forms, FAQs, and guidelines to better serve your needs.  Additionally -- we are migrating content from these pages to www.compliance.wisc.edu/hipaa; once we complete the migration, this site will retire and visitors to these pages will be re-directed to that location.  Thank you in advance for your patience! 

Please forward your website improvement suggestions to hipaa@wisc.edu.   


On this page, you will find links to UW-Madison's Privacy and Security Rule policies and procedures and its Personnel policies and procedures.  

In addition to these policies and procedures, UW-Madison faculty, staff and students are also subject to the policies and procedures of the Health Care Component Unit within which they are employed or assigned (e.g. University Health Services, State Laboratory of Hygiene) and to the policies and procedures of other covered entities within which they practice (e.g. University of Wisconsin Hospital and Clinics, Meriter-Unity Point Health, St. Mary's). 

Jump to UW-Madison's Personnel Policies and Procedures


Privacy and Security Rule Policies and Procedures
UW-Madison's policies are under review and continue to be updated as to Security Rule provisions. Please check back periodically for updates.

1.1 Designation of the UW-Madison Health Care Component (UW HCC)
1.2 Designation of the University of Wisconsin Affiliated Covered Entity (UW ACE)
2.1 Notice of Privacy Practices (NPP) Distribution and Acknowledgement

Related Form:  Acknowledgement of Receipt of Notice of Privacy Practices

3.2 Uses and Disclosures of Protected Health Information That Require Patient Authorization

Related Form: Authorization for Disclosure of Medical Information (General Purpose)

Related Form:  Business Associate Agreement

Related Form:  Sample Request for Amendment of Health Information
Related Form:  Sample Letter Accepting Amendment
Related Form:  Sample Letter Denying Amendment
Related Form:  Sample Letter Responding to Statement of Disagreement
Related Form:  Sample Letter Notifying of Need for 30 Day Extension
Related Form:  Sample Request for Notification of Amendment


Related Form:  Patient Privacy Complaint  

10.2 Designation of Unit Privacy and Security Coordinators


UW-Madison's Personnel Policies and Procedures

UW-Madison faculty and staff may be subject to discipline, up to and including termination, for violations of HIPAA regulations and/or UW-Madison rules and policies relating to HIPAA.  The applicable personnel policies and procedures appear below.

Faculty Policies and Procedures, Chapter 9

Academic Staff Policies and Procedures, Chapter 6

Classified Staff Policies and Procedures, Chapter 18



HIPAA Privacy Officer

Amanda K. Reese

4170 Health Sciences Learning Center
750 Highland Avenue
Madison, WI 53705

(608) 262-2059


HIPAA Security Officer

Stefan Wahe 

Room 2164 Computer Science & Statistics
1210 W. Dayton Street
Madison, WI 53706

(608) 265-1177


Anonymous Hotline (Anonymous Human Research Protection Hotline):

To report an IT security incident or loss of sensitive data call the DoIT Help Desk: 
608-264-HELP (4357)