A document required when information is shared with a company or person who is not a workforce member of the University of Utah’s HIPAA-covered entity AND the company or person, on behalf of the university, performs or assists in the performance of an activity involving the use or disclosure of protected health information (PHI).

More Information