Standards and Guidelines
Ensuring Compliance, Security, and Accessibility for UCLA's Web Platform Healthsciences Sites
All Web Platform Healthsciences sites are required to adhere to the following standards. These requirements are regularly reviewed and any major changes will be promptly communicated to site owners.
- General: All Web Platform Healthsciences sites are to be used for publicly facing communication. The Web Platform Healthsciences should not be used as an intranet site.
- Site Updates: All Web Platform Healthsciences sites should anticipate allocating a minimum of 15 hours a month to maintain and update content.
- Content on sites must be updated and reviewed regularly for accuracy.
- Content on sites must be updated and reviewed regularly for accuracy.
- Site Owners: All sites must have a site owner who is a FTE employee of UCLA.
- Site Access
- New Users – All users needing the ability to edit pages must attend the two introductory courses to gain access.
- Site Owner – Any user needing Site Owner access must attend the two introductory courses as well as additional training provided by the Web Platform Healthsciences Owners.
- Web Platform Healthsciences Owners – Will retain access to your site and will login to your site periodically for verification and site maintenance.
- Sustaining Access – Regular login activity within a 12-month period is required from all users for each site they have been granted access to. To regain access, users must submit a Support Request which will then be reviewed and approved by site owners.
- Communication: The Web Platform Healthsciences will communicate with users occasionally.
- All users must have and use an email ending in one of the following domains:
- The emails provided with the above listed domains are the method the Web Platform Healthsciences will use for all communications.
- All users agree to receive periodic emails from the Web Platform Healthsciences.
- Compliance with Regulations: All sites must adhere to relevant regulations, including those set forth by UCLA, UCLA Health and DGSOM.
- Branding: All sites must meet UCLA and UCLA Health guidelines related to branding and marketing.
- Security and Privacy:
- No site may install or place anything on a Web Platform Healthsciences site for the purpose of capturing data.
- Users are not allowed to add any CSS or unapproved HTML on the Web Platform Healthsciences.
- Compliance and Data Protection Guidelines:
- Responsibility: All site owners and users must ensure compliance with safeguards to protect restricted and organizational data, including adherence to HS 9401 regulations regarding PHI and PII. Site owners and users must not expose or capture any Protected Health Information (PHI), Personally Identifiable Information (PII), or other confidential information on the Web Platform Healthsciences.
- Safeguards: Reasonable safeguards must be employed at all times to prevent unauthorized disclosure of confidential information and to minimize incidental disclosures of PHI and PII. All Web Platform Healthsciences users must follow the "Minimum Necessary" policies for handling sensitive data in accordance with HS 9401.
- Redaction: Site owners and users are responsible for properly redacting content on the Web Platform Healthsciences in compliance with HS 9401 regulations regarding PHI and PII. Users must adhere to all guidelines, including the Minimum Necessary policies and Safeguards to Protect PHI and PII policies.
- Web Platform Healthsciences Audience:
- The Web Platform Healthsciences is provided to David Geffen School of Medicine, the School of Nursing, the School of Dentistry, and UHIT. The Web Platform Healthsciences is only for public-facing material.
- Content intended for an internal audience or containing sensitive data cannot be posted on the Web Platform Healthsciences. Please use, or request, a Mednet site for this type of content.
- The Web Platform Healthsciences may not be used for clinical information. If you need to highlight clinical-based information, please submit a request to UCLA Health Marketing.
- Accessibility: Websites must be accessible to individuals with disabilities, following WCAG 2.0 Guidelines (Web Content Accessibility Guidelines) and standards to ensure inclusivity.
- All components provided by the Web Platform Healthsciences will be accessible.
- All sites will do the following:
- Provide proper alt text when adding images.
- An image with text as the main message cannot be added to a Web Platform Healthsciences site (no flyers, QR codes or the like).
- Add captions to all videos and verify their accuracy.
- Upload only remediated PDF documents.
- Content Accuracy and Integrity: Information presented on a Web Platform Healthsciences site must be accurate, up-to-date, and evidence-based, reflecting the high standards of medical education and research.
- All links to external sites will be to current and appropriate information.
- Links may not point to sites like the internet archive as they are a historical record and may be outdated.
- The Web Platform Healthsciences may not be used as an archive or historical archive.
- Copyright
- All content posted on the Web Platform Healthsciences must fall into one of the following three categories:
- UCLA is the copyright holder.
- UCLA must have explicit permission from the copyright holder to post on an external-facing website.
- You have a Creative Commons license to use the content.
- You may not add content that you searched for on the internet and are adding to your site. You must have permission from the copyright holder.
- All content posted on the Web Platform Healthsciences must fall into one of the following three categories:
- User Experience (UX): Websites should provide an intuitive and user-friendly experience, facilitating easy navigation and efficient access to relevant resources for students, faculty, staff, researchers, and patients.
- All links within the site structure must go to a physical page. Sites may not use "<nolink>" in place of a physical site URL.
- All links within the site structure must go to a physical page. Sites may not use "<nolink>" in place of a physical site URL.
- Audits – The Web Platform Healthsciences Owners will periodically review all sites.
- Errors, Inconsistencies – If an issue is discovered, the Web Platform Healthsciences Owners will notify Site Owners of the issue.
- Minor Issues – If a minor issue is discovered on your site, the Web Platform Healthsciences Owners will notify the Site Owners who must rectify the problem as soon as practically possible.
- Moderate Issues – If a moderate issue is discovered on your site, the Web Platform Healthsciences Owners will notify the Site Owners who must rectify the problem within five business days.
- Major Issues – If a major issue is discovered on your site, the Web Platform Healthsciences Owners will correct the issue immediately if possible. If this is not possible, the page(s) or site will be unpublished until such time as it can be fixed.
- Resources: No Web Platform Healthsciences site may knowingly use Web Platform Healthsciences resources on other sites that will adversely affect the Web Platform Healthsciences.
- Documents: Only remediated PDF documents are allowed on Web Platform Healthsciences sites.
Images: Only the following image types are allowed and supported on the Web Platform Healthsciences. Any other image type is not supported and is not allowed on the Web Platform Healthsciences.
- PNG – Supported on all content types
- WEBP – Supported on all content types
- JPEG – Supported on all content types
Note: Website Administrators cannot add images to your site. Site editors are responsible for verifying that they comply with HS 9401 regulations regarding PHI and PII.
- SVG – Only supported in the header and footer of your site as part of a logo. All logos must meet UCLA and UCLA Health guidelines related to branding and marketing as per point 7 of this document. Note: Website Administrators cannot add images to your site. Site editors are responsible for verifying that they comply with HS 9401 regulations regarding PHI and PII.
Variances: Any site needing variances must submit a Support Request and work with the Web Platform Healthsciences Owners who will assess and work with site owners to accommodate their request when possible.