HIPAA and FERPA policy for Qualtrics

The University of Oklahoma has executed a HIPAA Business Associate Agreement (BAA) with Qualtrics allowing the Health Science Center health care components (HCC) to utilize the Qualtrics online survey and analytics tool with ePHI.

With this update, please know that the use of University PHI for research, analytics, and reporting is still governed by the University’s HIPAA polices (https://apps.ouhsc.edu/hipaa/secured/default.asp?page=policies.) If you have any questions, please reach out to the University’s HIPAA Compliance Team at oucompliance@ouhsc.edu

You may now utilize Qualtrics to collect FERPA-protected information. Keep in mind that it is your responsibility to request and use the information responsibly and in accordance with the University’s FERPA policies, available at https://www.ou.edu/registrar/academic-records/ferpa/release-of-information. If you have questions about the University’s FERPA policies or issues handling FERPA-protected information, reach out to the Office of the Registrar.