Guidance on HIPAA Authorization

Health Insurance Portability and Accountability Act (HIPAA)

HIPAA Privacy Rule Research Guidance (Main Page)

Protected Health Information (PHI) is created or received by a "covered entity", including a health care provider, and relates to the past, present or future physical or mental health, or a condition of an individual, or relates to payment for an individual's health care, or relates to the provision of health care in the past, present, or future, and identifies an individual or could be used for identifying an individual.

List of HIPAA identifiers:
  • Name
  • Geographic subdivisions smaller than state
  • All elements of dates (except year) related to an individual (including dates of admission, discharge, birth, death and for individuals over 89 years old, the year of birth must not be used)
  • Telephone numbers
  • Fax numbers
  • Electronic mail addresses
  • Social security numbers
  • Medical record numbers
  • Health plan beneficiary numbers
  • Account numbers
  • Certificates/license numbers
  • Vehicle identifiers and serial numbers
  • Device identifiers and serial numbers
  • Web Universal Resources Locators (URLs)
  • Internet Protocol (IP) address numbers
  • Biometric identifiers, including finger and voice prints
  • Full face photographic images and any comparable images
  • Any unique identifying number, characteristic or code

Preparatory to Research Activities
Are defined as:
  • Development of the research questions
  • Determination of study feasibility (in terms of the available number and eligibility of potential study participants)
  • Development of eligibility (inclusion and exclusion) criteria
  • Determination of eligibility for study participation of individual potential subjects
Certification for activities preparatory to research compliance with HIPAA Privacy Rule requirements for Use of PHI

Limited Data Set Guidance (LDS)
PHI of Decedents

UW-Madison Health Care Component (HCC)

See Also:

Keywords:PHI, limited data set, LDS, HIPAA training, preparatory research, health component, personal health information, data use agreement, HIPAA deceased, HIPAA decease, DUA, preparatory to research zip code codes waiver destroying link   Doc ID:18671
Owner:Monica E.Group:Health Sciences IRBs
Created:2011-05-26 19:00 CDTUpdated:2015-10-13 15:15 CDT
Sites:Health Sciences IRBs
Feedback:  1   1