Office of HIPAA Privacy and Security

Frequently Asked Questions

Mandatory Compliance Initiative

What is required?

  1. Completion of the HIPAA Privacy and Security Awareness computer-based learning module (CBL) in the ULearn system.
  2. Acknowledgement of the following forms in myUM:

My job does not involve interaction with patients. Am I still required to complete these tasks?

Yes. Due to the interdisciplinary nature of the medical school/health system environment and the need for all employees to be aware of their responsibilities in protecting the University's sensitive data, all individuals are required to comply.

How do I complete the ULearn CBL?

  • Be sure that any pop-up blockers in your browser are disabled (instructions below).
  • Access the ULearn system. Use your Cane ID to log in, the same credentials you use to access myUM.
  • Follow the on-screen instructions.
  • Once you log in to the system, the HIPAA Privacy and Security Awareness Training CBL will appear in the Mandatory Learning section at the upper left-hand corner.
  • Complete the HIPAA Privacy and Security Awareness Training CBL.

How do I disable pop-up blockers?

The Professional Development and Training Office (PDTO) offers a demonstation to disable the Google Toolbar and Internet Explorer 7 pop-up blockers. For other browsers or if you need further assistance, please contact your IT support group.

How do I log in to the ULearn system?

PDTO offers a demonstration to log in to ULearn.

What if I do not know my Cane ID or password?

See the Cane ID homepage for help recovering your Cane ID and password.

Who do I call if I need assistance with ULearn?

First, review the tutorial and ensure that pop-up blockers have been disabled on your computer. If you do not disable them, the system will not work. Make certain you are using your C-number as your username.

If you still need assistance, call PDTO at 305-243-3090.

How do I complete the Acknowledgements in myUM?

This is the system where you acknowledge your benefits. Follow the steps below:

  • Access myUM.
  • Log in with your CaneID and password.
  • Proceed to the Employee tab and select Payroll, HR & Misc.
  • Click the link titled HIPAA and Confidentiality/Computer Use Agreements.
  • Read and acknowledge the forms.

Who do I call if I need assistance with myUM?

Remember, to log in to myUM, use your CaneID, not your C-number. If you still need assistance, please call the helpdesk at 305-284-6565, option 2.

When is the deadline for completion?

May 4, 2009.

I am a medical school student. Do these requirements apply to me?

At this time, the initiative does not apply to individuals who are only students (if you are a part-time employee, these requirements do apply). It only applies to medical school faculty, staff, and temporary employees. If a decision is made to change this in the future, a directed communication will be sent to students at that time.

I am a Jackson resident and received the mandatory compliance initiative email. Do these requirements apply to me?

No. The initiative only applies to University of Miami Faculty and Staff. The Jackson residents are included on the UM Medical School Email distribution list and therefore inadvertently received this communication.

Can the systems be accessed from home?

Yes, you may complete the required tasks from your office or home computer.

What happens if I do not complete these requirements?

Failure to do so will result in disciplinary action including suspension from the workplace and from access to electronic healthcare systems. Continued failure to comply will result in additional disciplinary action including termination.

How do I proceed through the quiz at the end of the ULearn CBL?

After clicking on the answer to a question, you must click the Submit button at the lower right corner. If your answer is incorrect, Try Again will be displayed. If your answer is correct, a notification will appear and you may click anywhere on the white area to advance to the next question. After answering question 5 please be patient and let the system acknowledge your successful completion of the class before closing the window.

I completed the HIPAA Privacy and HIPAA Security classes not long ago. Why do I have to complete this class again?

The HIPAA Privacy and HIPAA Security classes have been combined and updated into one single, new class, emphasizing the need to protect not just patient information, but also other sensitive information. Recent audits (as well as state and federal laws) require an increased emphasis on privacy and security awareness training. For these reasons, the new class is mandatory for all faculty and staff.

I've taken the training but have questions about content. What should I do?

Email hipaaprivacy@med.miami.edu.

Support Questions

I need help with encryption of my laptop, USB drive, email, etc. Who do I contact?

Please contact Medical Information Technology at 305-243-5999. If you have a local IT support group, you may also contact them, as they liaise with Medical Information Technology on your behalf.

I need locked paper shredding bins in my area. Who do I contact?

Please contact Environmental Services at 305-243-1052.

What is sensitive information?

Broadly speaking, sensitive information is any information that if improperly accessed, disclosed, or destroyed can harm the University. Examples of sensitive information include protected health information, credit card numbers, social security numbers, as well as confidential financial information and communications. For more information, please see: