The Health Insurance Portability and Accountability Act Privacy Rule: A Practical Guide for Researchers

  title={The Health Insurance Portability and Accountability Act Privacy Rule: A Practical Guide for Researchers},
  author={Patrick P. Gunn and Allen M. Fremont and Melissa M. Bottrell and Lisa R. Shugarman and Jolene Galegher and Tora K. Bikson},
  journal={Medical Care},
Background:The Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule, intended to address potential threats to patient privacy posed by the computerization and standardization of medical records, provides a new floor level of federal protection for health information in all 50 states. In most cases, compliance with the Privacy Rule was required as of April 2003. Yet considerable confusion and concern remain about the Privacy Rule and the specific changes it requires in the… 
Internet-based Neuro-oncology Patient Recruitment
This work presents a novel Internet-based method to generate and maintain a neurooncology patient registry and human tissue bank and offers one way for researchers to adapt to the changing world of clinical research.
Impact of the Privacy Rule on the Study of Out-of-Hospital Pediatric Cardiac Arrest
  • Marilyn C. Morris, C. Mechem, V. Nadkarni
  • Medicine, Political Science
    Prehospital emergency care : official journal of the National Association of EMS Physicians and the National Association of State EMS Directors
  • 2007
A survey was used to assess site-specific methods of compliance with the Privacy Rule and the extent to which such strategies were successful and uniformity of methods to adhere to regulatory requirements would ease the conduct of prehospital research.
Balancing access to health data and privacy: a review of the issues and approaches for the future.
An overview of the challenges raised by concerns about data confidentiality in the context of health services research, the current methodologies used to ensure data security, and a description of one successful approach to balancing access and privacy are provided.
Impact of the Health Insurance Portability and Accountability Act on Participant Recruitment and Retention
Ongoing obstacles to recruitment in prospective clinical research studies related to the HIPAA privacy rule, as well as HIPAA-compliant strategies to enhance recruitment and retention are addressed.
Implementing patient access to electronic health records under HIPAA: lessons learned.
A Boston healthcare system's approach to providing patients access to their electronic health records (EHRs) via Patient Gateway, a secure, Web-based portal, which allows patients to access information from their medical charts via the Internet in a secure manner is described.
Collaborative eHealth Meets Security: Privacy-Enhancing Patient Profile Management
A privacy-aware profile management approach is proposed that empowers the patient role, enabling him to bring together various healthcare providers as well as user-generated claims into an unique credential.
Medical Privacy and the Internet
E-health technology has started to become commonplace in the clinical world, with practitioners setting up their own Web sites to disseminate educational information to patients, with physicians and
Electronic Consent Channels: Preserving Patient Privacy Without Handcuffing Researchers
By recognizing and responding to patient privacy concerns, policy-makers, researchers, and information technology leaders have the opportunity to transform trial recruitment and make it safer to electronically locate and convey sensitive health information.
Practice-Based Research Network Studies in the Age of HIPAA
There are a number of ways for PBRN researchers to comply with HIPAA short of obtaining patient consent and authorization for every study, and careful planning and consideration of HIPAA issues during study design can go a long way toward reducing frustration later.
Hearing loss and speech privacy in the health care setting: a case study.
A case study of two clinical environments, one where speech privacy was judged by health care workers to be adequate and one where it was judged to be inadequate, revealing three factors that led to the perception of inadequate speech privacy.


HIPAA privacy rule and public health. Guidance from CDC and the U.S. Department of Health and Human Services.
  • S. Thacker
  • Medicine, Political Science
    MMWR supplements
  • 2003
The purpose of this report is to help public health agencies and others understand and interpret their responsibilities under the Privacy Rule.
"Exempt" research after the privacy rule.
It is therefore critical that covered entities like hospitals and academic medical centers identify all on-going exempt research as soon as possible and obtain subject authorization, or IRB waiver of authorization, for subjects enrolled prior to HIPAA's compliance date.
The new federal medical-privacy rule.
On August 9, 2002, the Department of Health and Human Services released the final version of the federal medical-privacy rule (Federal Register 67: 53182–53273, 2002). The release ended a tortuous ...
Guidelines for infection control in dental health care settings--2003.
Dental offices that follow these new recommendations will strengthen an already admirable record of safe dental practice and patients and providers alike can be assured that oral health care can be delivered and received in a safe manner.
The effect of the new federal medical-privacy rule on research.
The American people generally support and encourage medical research, but they also place a high priority on the privacy of personal medical information. The Health Insurance Portability and Accoun...
Medical privacy and medical research--judging the new federal regulations.
  • G. Annas
  • Medicine
    The New England journal of medicine
  • 2002
Americans support both protecting the privacy of medical records and encouraging medical research. Thus, it is not surprising that a move to change practices in these two areas has generated attent...
Researchers Say Rules Are Too Restrictive
A coalition of biomedical societies and research universities is mounting a major assault on a new rule covering the privacy of health records, arguing that the regulation will stifle research.
AIV Assembly, Integration, Verification AOA Angle of Attack CAD Computer Aided Design CFD Computational Fluid Dynamics GLOW Gross Lift-Off Mass GNC Guidance Navigation and Control IR Infra-Red LEO
CFR § 514(c)
    Protecting Personal Health Information in Research: Understanding the HIPAA Privacy Rule (NIH Publication #03-5388)