Skip to Main Navigation
Skip to Main Content
The University of Texas at Dallas

HIPAA Privacy Manual

Section 19: Record Keeping


UTD will maintain accurate and complete documentation of Protected Health Information (PHI).


Records kept for PHI may include, but are not limited to:

  • All policies and procedures
  • Authorization forms
  • Notice of Privacy Practices
  • Business associate contracts
  • Requests for inspection/copying, including denials
  • Requests for amendment and the responses to those requests
  • Request for Accounting of Disclosure of PHI, and copy of account log give to patients
  • Education and training logs
  • Complaints received and resolutions of same
  • Requests for restrictions/confidential communication and agreement/denial
  • Medical Records
  • Billing/Payment Records
  • Patient Acknowledgment of Privacy Notice