U of U Information Security Policy 4-004 - This document is expansive with links to HIPAA, FERPA and other relevant regulatory sources.
http://regulations.utah.edu/it/4-004.php