HIPAA
Ensure UA Little Rock is properly defined as hybrid-entity (or otherwise) (notes to Legal, waiting on time to meet and review UA Little Rock position)
Establish roles / departments that must be trained
Firmly establish Security Officer
Firmly establish Privacy Officer
Document (publicly) our position, who to contact
Above added Dec 1, 2017 @Former user (Deleted)