National Institutes of Health


Sitemap Contact
National Institutes of Health HIPAA Privacy Rule - Information for Researchers
This website is currently in the process of being updated. For guidance on the HIPAA Privacy Rule in research, please see: https://www.hhs.gov/hipaa/for-professionals/special-topics/research/index.html
HomeDictionaryFAQResources

Educational Materials

Clinical Research

Authorizations

Institutional Review Boards

Privacy Boards

Information for Patients

HIPAA Privacy Rule Booklet for Research

Health Services Research and the HIPAA Privacy Rule

Research Repositories, Databases


Slide Presentations

National Institutes of Health
Slide Presentation on the Privacy Rule and Research


Slide 25:
Please see description below for information in image.
< Previous Slide 25 Next >

The Data Use Agreement MUST

  • Describe permitted uses and disclosures (recipient cannot use or disclose PHI in a way that the covered entity cannot).
  • Identify who can use and receive the Limited Data Set.
  • Require the recipient to:
    • Use or disclose information for specified purposes only.
    • Apply safeguards to protect the information.
    • Report known, non-permitted uses or disclosures to the covered entity.
    • Ensure that agents/ subcontractors agree to the same standards as in the agreement.
    • Not re-identify the information or contact the individuals.

Department of Health and Human Services National Institutes of Health USAGov The HIPAA Privacy Rule