Health Insurance Portability and Accountability Act (HIPAA)

The Health Insurance Portability and Accountability Act (HIPAA) of 1996 is a federal law that has several provisions affecting research involving health-related data derived from human research participants. The HIPAA Privacy Rule establishes a set of requirements for protecting the confidentiality of person-identifiable data arising as a result of health care services, and includes the requirement that authorization be obtained in most cases before this type of data can be used for research purposes. The Privacy Rule also requires that research plans for use of this type of data undergo review and approval by an Institutional Review Board (IRB) or Privacy Board.

HIPAA Privacy Rule: Information for Researchers
Summary information and documents on the National Institutes of Health site.