HIPAA governs the use and disclusure of "protected health information" by "HIPAA-covered entities." In order to access this information, researchers must have each subject whose PHI is being gathered sign a HIPAA Authorization or HIPAA Release form.
HIPAA Methods for De-identification
If subjects will not be signing a HIPAA Authorization you must obtain approval from the IRB for use of a Waiver or Alteration of Authorization or a Partial Waiver of Authorization.
Research conducted at the UMKC School of Dentistry or University Health/Truman Medical Centers involving the use of PHI is processed through the UMKC IRB via the eCompliance system.
You can find additional information regarding HIPAA under the Explore HIPAA links to the right.
These forms open in Internet Explorer