The Health Insurance Portability and Accountability Act (HIPAA) states that

1. patient records and photos used in teaching must be stripped of all direct identifiers such as:
   • name
   • address
   • social security number
   • patient ID number
   • identifiable photographic images
   • etc.
2. or that you have written authorization from the patient to use his/her directly identifiable health information in this way.

HIPAA and D2L

Please do not not place patient health information* within Brightspace/D2L as this system does not comply with HIPAA data-security requirements. Please contact the Enterprise Privacy Officer or the Information Security Officer for more information.

* Presentation materials can include but are not limited to:

• handouts
• slides
• PowerPoint presentations
• videos
• reproductions of journal articles.