
HIPAA Privacy Coordinator
At UW-Madison, programs enforcing Health Insurance Portability and Accountability Act (HIPAA) protections for the privacy and security of health information program exist at multiple levels. At the campus level, the UW-Madison HIPAA Program includes both a Privacy Officer and a Security Officer, each of whom are responsible for the entire Health Care Component.
HIPAA Privacy and Security Coordinators associated with each unit of the Health Care Component serve as the first point of contact when UW Madison employees have questions about protected health information (PHI).
UW SMPH has a full time HIPAA Privacy Coordinator, Ryan Moze, who serves as a general resource regarding HIPAA and PHI. Moze can assist school employees with accessing PHI, including access to Health Link and any questions about HIPAA training, including registration.
Moze also works closely with SMPH Human Resources during the annual training rollout and throughout the year to ensure that individuals are compliant with HIPAA training requirements.
OVERVIEW
The protection of the rights, welfare, and well-being of human subjects involved in research is of paramount importance to us. Many offices within and also partnered with ICTR provide clarification and guidance, offer educational programs and materials, maintain regulatory oversight, and provide advice on ethical and regulatory issues in research. We are committed to ensuring that both our campus-based academic partners and our off-campus community-based partners clearly understand their roles and responsibilities when participating in research.

SMPH Honest Broker
In Fall 2017, Thomas Callaci became the first SMPH Honest Broker. An honest broker is an independent party who ensures that researchers receive protected health information (PHI) in a way that minimizes the overall risk to all parties.
An honest broker confirms compliance with Institutional Review Board (IRB) guidance, university policy, U.S. federal regulations, HIPAA rules, as well as contractual, local, and international regulations. He will also introduce new technologies to protect privacy, including methods to de-identify and re-identify data.
The overarching goal of the Honest Broker office is to reduce challenges associated with research that relies on PHI, while also reducing risks associated with using health-related data.
Callaci works in a collaborative team with staff in the UW-Madison IRB Office, the UW-Madison HIPAA Privacy Officer, the UW-Madison HIPAA Security Officer, various UW Health colleagues, and numerous privacy and security entities on campus.
He works with the ICTR CHI2 Team to coordinate oversight of investigator requests for patient data, reduce data risk, and deliver data to appropriately secure locations.