Skip to main content
Explore URMC

SMD Logo


Orientation Information

University NET-ID

Information to set up your NET ID should have been received in your Orientation Packet previously forwarded to you from the Office for Graduate Education and Postdoctoral Affairs.  If this has not already been accomplished, please contact the Office for Graduate Education and Postdoctoral Affairs at:

HSPP (Human Subjects Protection Program)

The University of Rochester’s certification for human subjects research is administered through an online program called the Collaborative Institutional Training Initiative (CITI Program). For certification, you need to complete a series of short on-line modules with a brief quiz after each module. The instructions below will guide you through the process. When you successfully complete the program, OHSP will receive notification via email. Go to and click on "Register”. Select the "University of Rochester" from the drop-down box under Participating Institutions. Complete the remainder of the registration steps. Please note you do not need to enter your employee number in to the registration.

Under step 7, select Human Subject Protection. On the next page, there will be two sections, “Initial Certification Program” and “Recertification Program”. Under “Initial Certification Program” (top section) you will select the program that corresponds to the type of research you will conduct at the University of Rochester.

For Human Subject Certification are the following:

  • Greater Than Minimal Risk Biomedical – Select this course if you will conduct research with drugs, devices, biologics, or medical procedures that involve greater than minimal risk such as biopsies, x-rays or administration of radiation.
  • Greater Than Minimal Risk Behavioral – Select this course if you will conduct social and behavior research with sensitive topics, such as domestic violence, drug abuse, or criminal behavior.
  • Minimal Risk – Select this course if you will conduct research using minimal risk procedures, such as collection of small amounts of blood or other biological materials, most surveys, record reviews, moderate exercising testing, or administration of psychological tests involving a minor level of stress.

Please note that if you obtain certification for minimal risk research, but then get involved in a greater than minimal risk study, you will be required to complete certification for greater than minimal risk research.

You will need to click “Finalize Registration” and then will receive a confirmation email from the CITI program, which will include the next step in finalizing your registration.

Once you receive the email, click on the link to validate your email address, and then click where indicated to log back into your CITI account. Click on the title of the course to begin taking the certification. You must complete the Integrity Assurance Statement before beginning the course.  OHSP will send you an e-letter confirming you have successfully certified and provide your expiration date.

Tips on certification:

  • You can leave the course and come back to it as many times as you need.
  • You must score at least 85% to successfully obtain certification for human subjects research
  • You can go back into each module as many times as necessary to achieve a total score of 85%.

HIPAA (Health Insurance Portability and Accountability Act)

What is HIPAA?

The federal Health Insurance Portability and Accountability Act of 1996 (HIPAA), includes new important laws and regulations governing health insurance coverage protection and health information security for Americans and their families. The intent of HIPAA is to assure the portability of health insurance, decrease healthcare fraud and abuse, improve efficiency and effectiveness of healthcare, enforce standards, and guarantee security and privacy of patient identifiable information. Title II of HIPAA is Administrative Simplification, the intent of which is to improve the effectiveness and efficiency of health information by standardizing electronic data interchange (EDI) and protect the security and privacy of health information by setting standards.

Workforce Member Training Record Forms with identified specific modules to be completed are provided in your folder.  Please forward completed and signed training record forms for both HIPAA Privacy and Security to Elaine Topeck, Secretary, Box CU420644 by mid-September.

Additional HIPAA Related Web Sites

  • - The US Department of Health and Human Services Research, Policy and Administration site offers numerous searchable pages for information on general health policies.
  • - The US Department of Health and Human Services has the text of the administrative simplification law and regulation on HIPAA.
  • - The American Health Information Management Association (AHIMA) is a professional association that represents more than 40,000 specially educated health information management professionals who work throughout the healthcare industry.
  • - The Forum on Privacy and Security in Healthcare is a HOST-affiliated, industry group working with the National Information Assurance Partnership (NIAP), a government agency, to provide a wide-based industry view on security issues confronting healthcare.
  • - The Association for Electronic Healthcare Transactions is an organization that addresses technical and policy issues and is a recognized leader by government healthcare and legislative organizations. The AFEHCT also offers workgroups focusing on identifying issues and implementation concerns regarding HIPAA Standards.
  • - The Healthcare Information and Management Systems Society represents the interests of healthcare professionals and is a comprehensive source for up-to-date information in this policy field. The HIPAA focus area outlines a variety of issue areas including news, education, publications, solutions, and conferences.
  • - The National Committee for Quality Assurance provides general information centered upon healthcare quality improvement and accountability.
  • - The Workgroup for Electronic Data Interchange website promotes electronic commerce in the healthcare industry. Also included is a section devoted to information, reports, publications, and activities related to HIPAA.
  • - The Center for Democracy and Technology offers a comprehensive guide to protecting one's privacy on the information superhighway.
  • - A resource for HIPAA implementation, the Medical Group Management Association's (MGMA's) core purpose is to improve the effectiveness of medical group practices and the knowledge and skills of the individuals who manage/lead them.