The Privacy Rule (45 CFR 164) requires authorization, a waiver, or another permitted basis (limited data set with DUA, decedent research, reviews preparatory to research) before a covered entity may use or disclose PHI for research.
← Back to Glossary
Glossary Term
HIPAA Privacy Rule
Regulatory
Also known as: Privacy Rule, HIPAA, 45 CFR 164
The federal rule governing the use and disclosure of protected health information (PHI) by covered entities, including for research.
Need IRB review for your study?
Elemental IRB provides fast, transparent ethical oversight for commercial and academic research.