Research and HIPAA
If your research involves the use of health information about living or deceased persons or is related to human biological samples or health information stored in data repositories, you will need to consider how HIPAA impacts your ability to access and use the information. As a general rule, a HIPAA-covered entity, such as a health care provider, cannot use or disclose to you an individual’s protected health information (PHI) for research without having the individual’s written authorization. There are several specific situations, however, in which a written authorization is not required. This tool is intended to provide guidance to researchers on the various methods for obtaining PHI from a HIPAA covered entity for research needs.
Please check the FAQ for more information about HIPAA and Research