U of U Information Security Policy 4-004  - ​This document is expansive with links to HIPAA, FERPA and other relevant regulatory sources.

http://regulations.utah.edu/it/4-004.php