Business Associates
If are not a healthcare provider but you do business with one, you may be a Business Associate.




  

Research

In the course of conducting research, researchers may obtain, create, use, and/or disclose individually identifiable health information. Under the Privacy Rule, covered entities are permitted to use and disclose protected health information for research with individual authorization, or without individual authorization under limited circumstances set forth in the Privacy Rule.



Research Use/Disclosure Without Authorization.
To use or disclose protected health information without authorization by the research participant, a covered entity must obtain one of the following:



  1. Documented Institutional Review Board (IRB) or Privacy Board Approval


  2. Preparatory to Research

  3. Research on Protected Health Information of Decedents

  4. Limited Data Sets with a Data Use Agreement

  5. Research Use/Disclosure With Individual Authorization

  6. Accounting for Research Disclosures

  7. Transition Provisions


    Legislation Files Containing This Term:
    legislation/45CFR-164.501.html
    legislation/45CFR-164.506.html
    legislation/45CFR-164.508.html
    legislation/45CFR-164.512.html
    legislation/45CFR-164.514.html
    legislation/45CFR-164.524.html
    legislation/45CFR-164.526.html
    legislation/45CFR-164.530.html
    legislation/45CFR-164.532.html

    Web Pages Containing This Term:
    examples.html
    factSheet04022002.html

© 2002,2003 HIPAA PS