1670.035 HIPAA Security: Operational Contingency Plan for Electronic Protected Health Information Policy
The University must have in place adequate procedures for responding to an emergency or other occurrence (for example, fire, vandalism, system failure, and natural disaster) that damages systems that contain electronic protected health information.

