Policies and Procedures are available in PowerPolicy.
Unless otherwise indicated, "Main Campus" includes hospitals and clinics on the main campus and at One Hundred Oaks. "Regional Hospitals" includes regional hospitals, their associated clinics, and VIP locations.
| Sanctions for Privacy and Information Security Violations | Main Campus | Regional Hospitals |
| Authorization to Access Medical Records: Self and Others | Main Campus | Regional Hospitals |
| Use and Disclosure of Protected Health Information | Main Campus | Regional Hospitals |
| Electronic Messaging of Individually Identifiable Patient and Other VUMC Confidential or Sensitive Information | Main Campus | Regional Hospitals |
| Protection and Security of Protected Health Information | Main Campus | Regional Hospitals |
| Patient/Visitor Photography/Recordings and Use of Recording Devices to Capture Patients and Visitors | Main Campus | Regional Hospitals |
| Disposal of Private or Restricted Data | Main Campus | Regional Hospitals |
| Social Media | Main Campus | Regional Hospitals |