National Institutes of Health


Sitemap Contact
National Institutes of Health HIPAA Privacy Rule - Information for Researchers
This website is currently in the process of being updated. For guidance on the HIPAA Privacy Rule in research, please see: https://www.hhs.gov/hipaa/for-professionals/special-topics/research/index.html
HomeDictionaryFAQResources

Educational Materials

Clinical Research

Authorizations

Institutional Review Boards

Privacy Boards

Information for Patients

HIPAA Privacy Rule Booklet for Research

Health Services Research and the HIPAA Privacy Rule

Research Repositories, Databases


Slide Presentations

National Institutes of Health
Slide Presentation on the Privacy Rule and Research


Slide 13:
Please see description below for information in image.
< Previous Slide 13 Next >

Elements of an Authorization to Use or Disclose PHI

Core Elements (signified by * ) Statements (signified by - )
* Description of PHI to be used or disclosed
* Person(s) authorized to make the requested use or disclosure.
* Person(s) to whom the covered entity may disclose PHI.
* Each purpose for the use or disclosure.
* Expiration date or event* (e.g. "end of the research study" or "none").
* Participant Signature and
       Date
- Right to revoke Authorization plus exceptions and process.
- Ability/Inability to condition treatment, payment, or enrollment/eligibility for benefits on Authorization.
- PHI may no longer be protected by Privacy Rule once it is disclosed by the covered entity.
The authorization must be written in plain language, and the covered entity must provide the individual with a copy of the signed Authorization.

Department of Health and Human Services National Institutes of Health USAGov The HIPAA Privacy Rule