Main Content
HIPAA and Research
Protected Health Information (PHI) may be used and disclosed in research under three conditions:
1. The individual signs a written “authorization” giving permission;
2. The information or data is de-identified; or
3. PHI may be used and disclosed for research without an Authorization in limited circumstances. This may be accomplished through:
Institutional Review Board Manual
HIPAA and Research
Conditions for Use/Disclosure of PHI
Protected Health Information (PHI) may be used and disclosed in research under three conditions:
1. The individual signs a written “authorization” giving permission;
2. The information or data is de-identified; or
3. PHI may be used and disclosed for research without an Authorization in limited circumstances. This may be accomplished through:
- Waiver
- Data collection preparatory to research (See web site below for description).
For other conditions under this heading, see http://privacyruleandresearch.nih.gov/pr_08.asp#8c

