National Institutes of Health


Sitemap Contact
National Institutes of Health HIPAA Privacy Rule - Information for Researchers
This website is currently in the process of being updated. For guidance on the HIPAA Privacy Rule in research, please see: https://www.hhs.gov/hipaa/for-professionals/special-topics/research/index.html
HomeDictionaryFAQResources

Educational Materials

Clinical Research

Authorizations

Institutional Review Boards

Privacy Boards

Information for Patients

HIPAA Privacy Rule Booklet for Research

Health Services Research and the HIPAA Privacy Rule

Research Repositories, Databases


Slide Presentations

National Institutes of Health
Slide Presentation on the Privacy Rule and Research


Slide 12:
Please see description below for information in image.
< Previous Slide 12 Next >

Authorizations for Research

  • Must be for a specific research study - Authorization for future, unspecified research is NOT permitted but Authorization may be obtained to permit the use or disclosure of PHI to create or maintain a repository or database.
  • Different from, but may be combined with, informed consent.
  • Review/approval by IRB/Privacy Board NOT needed under Privacy Rule. (But other regulations would require IRB review when combined with informed consent documents.)
  • Must contain “core elements” & “required statements,” and a signed copy must be given to the individual.
  • Research Authorizations need not expire, but this must be stated.

Department of Health and Human Services National Institutes of Health USAGov The HIPAA Privacy Rule