Privacy and Security

1. Questions related to HIPAA Privacy, including whether information constitutes PHI or the minimum necessary:
   1. For SMPH researchers: Ryan Moze, SMPH Privacy Coordinator
   2. For all others, the HCC unit Privacy Coordinator or Jack Talaska, HIPAA Privacy Officer (including for non-HCC researchers)
2. Questions related to HIPAA Security, including whether cloud storage tools, data maintenance and transfer tools, etc., are secure:
   1. For SMPH researchers: Ignacio Rodriguez Cortes, Honest Broker, and Amy Diestler, SMPH Security Coordinator
   2. For all others, the HCC unit Security Coordinator or Dharvesh Naraine, HIPAA Security Officer (including for non-HCC researchers)
3. Questions related to security for sensitive but non-HIPAA covered data, including whether cloud storage tools, data maintenance and transfer tools, etc., are secure:
   1. For questions relating to the classification of data, study teams can review this guidance or consult Lisa Johnston, Director of Data Governance.
   2. A request for a security review of an online tool (e.g., software) can be made through OneTrust
   3. For SMPH researchers, general questions can be directed to Ignacio Rodriguez Cortes, Honest Broker, and Amy Diestler, SMPH Security Coordinator
   4. For all others, general questions can be directed to RMC Cybersecurity or Patti Havlicek, Cybersecurity RMC Assoc. Director

Data Access through CRDS

1. For general questions, Ignacio Rodriguez Cortes, Honest Broker
2. For recruitment related questions, Mike Semanik, Clinical Leader for CRDS, and Gabe McMahan, Director for Research Data Services

Legal Terms of Use for Online Platforms/Software

1. For questions about Terms and Conditions for tools that researchers will be buying, direct study teams to Purchasing Services
2. For questions about Terms and Conditions related to tools that are free on the web, direct study teams to RSP Contracts Manager and Team

OpenAI

1. For SMPH researchers, questions about what kind of information can be input to OpenAI like ChatGPT, direct study teams to Mike Collins, Senior IT Director
2. For all others, direct questions to Todd Shechter, Chief Technology Officer, Division of Information Technology (DoIT)