This Attachment to the Drug-Free Campus and Drug-Free Workplace Policies outlines effects related to the consumption of alcohol.

This policy establishes guidelines for the use and disclosure of health information by UAB/UAB Health System Covered entities in compliance with the Health Insurance Portability and Accountability Act and Alabama state law.

To protect the security and confidentiality of protected information created or received in the course of business, once records reach the end of their scheduled retention period, they should be disposed. These procedures outline various methods of destruction, which depend on the nature of the information stored and the medium of record storage.

This policy establishes guidelines requiring all UAB operating units to institute and implement an appropriate records management program.

The purpose of effort reporting is to comply with federal government mandates to ensure the proper charging of labor costs to federally and non-federally sponsored activities at the University of Alabama at Birmingham (UAB). This includes salaries, wages, and benefits.

This policy establishes guidelines for reporting and investigating known and suspected information security incidents.

This policy establishes guidelines for the use and disclosure of identifiable health information for purposes of research by UAB/UABHS Covered Entities in compliance with the Health Insurance Portability and Accountability Act (“HIPAA”) and Alabama state law.

This policy describes the UAB Enterprise's commitment to conducting its activities in ways that promote and maintain public trust and sets forth requirements for employees and other designated individuals in identifying and managing conflicts of interest and conflict of commitment.

This policy establishes guidelines for the use and disclosure of health information for purposes of marketing by UAB/UABHS Covered Entities in compliance with the Health Insurance Portability and Accountability Act and Alabama state law.

This policy establishes guidelines for contingency planning for information systems that contain, maintain, or transmit ePHI or other sensitive information.