This policy describes the components of the UW-Madison Affiliated Covered Entity (UW ACE) as it relates to the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule. The HIPAA Privacy Rule governs how organizations handle protected health information (PHI). HIPAA regulations apply to businesses and individuals in the health care industry such as health plans and health care providers. These are called “covered entities,” meaning they are “covered” by HIPAA. An affiliated covered entity (ACE) is formed when two or more legally separate covered entities have an affiliation (meaning they are under common ownership or control) and designate themselves as a single covered entity for purposes of complying with HIPAA.
Applies to UW-Madison students, staff, and affiliates who are within the UW Health Care Component, UW Affiliated Covered Entity, or otherwise access protected health information
05-26-2014: Effective date of the revised policy: 05-26-2014.
07-12-2018: Effective date of the revised policy: 07-12-2018.
11-22-2019: Effective date of the revised policy: 11-22-2019.
03-26-2020: Effective date of the revised policy: 03-26-2020.
05-11-2025: Effective date of the revised policy: 05-11-2025.