This form is to be used in conjunction with the Application for IRB Review

Similar documents
HIPPA Research Policy

HIPAA Insurance Portability Act HIPAA. HIPAA Privacy Rule - Education Module for Institutional Review Boards

COLUMBIA UNIVERSITY MEDICAL CENTER INSTITUTIONAL REVIEW BOARD (IRB)

Project Number Application D-2 Page 1 of 8

UNIVERSITY OF TENNESSEE HEALTH SCIENCE CENTER INSTITUTIONAL REVIEW BOARD USE OF PROTECTED HEALTH INFORMATION WITHOUT SUBJECT AUTHORIZATION

HIPAA GUIDANCE: ALTERATION OR WAIVER OF AUTHORIZATION (AWA) Revised: July 9, 2004

EVMS Medical Group A. RESEARCH USE AND OR DISCLOSURE WITHOUT AUTHORIZATION:

Title: HP-53 Use and Disclosure of Protected Health Information for Purposes of Research. Department: Research

7 ATLzr UNIVERSITY OF CALIFORNIA. January 30, 2014

COLUMBIA UNIVERSITY INSTITUTIONAL REVIEW BOARD POLICY ON THE PRIVACY RULE AND THE USE OF HEALTH INFORMATION IN RESEARCH

Human Research Protection Program (HRPP) HIPAA and Research at Brown

HIPAA: What Researchers Need to Know

UAMS ADMINISTRATIVE GUIDE NUMBER: 2.1

University of Mississippi Medical Center Data Use Agreement Protected Health Information

Children s Hospital of Philadelphia SOP 707 Page Effective Date: Title: Requirements for and

Standards for Privacy of Individually Identifiable Health Information

City and County of San Francisco Department of Public Health DPH Health Information Data Use Agreement

E-Protocol Document Checklist and GPS IRB Guide - Students

For questions regarding the completion of the application, please contact Dr. Robert Laird at or by

HIPAA Basics For Clinical Research

TEXAS SOUTHERN UNIVERSITY HIPAA BUSINESS ASSOCIATE AGREEMENT

LightHouse HEALTHCARE POLICY MANUAL

Last Approval Date: April 2017

State Data Requests Memo Introduction Defining research

POLICY FOR THE PROTECTION OF HUMAN SUBJECTS IN RESEARCH

RELEASE OF PROTECTED HEALTH INFORMATION ( PHI ) FOR RESEARCH PURPOSES

HIPAA and Research at UB

UBMD Policy for HIPAA Compliant Subject Recruitment

OMNIBUS COMPLIANT BUSINESS ASSOCIATE AGREEMENT RECITALS

Give you this notice of our legal duties and privacy practices related to the use and disclosure of your protected health information

HIPAA Privacy Compliance Plan for Research. University of South Alabama IRB Guidance and Procedures

2016 Business Associate Workforce Member HIPAA Training Handbook

BUSINESS ASSOCIATE AGREEMENT

HIPAA PRIVACY POLICY AND PROCEDURES FOR PROTECTED HEALTH INFORMATION THE APPLICABLE WELFARE BENEFITS PLANS OF MICHIGAN CATHOLIC CONFERENCE

HIPAA FUNDAMENTALS For Substance abuse Treatment Industry

HHS Proposed Rule Modification for the HIPAA Standards for Privacy of Individually Identifiable Health Information (NPRM)

HIPAA Business Associate Agreement

PREPARATORY TO RESEARCH & PRESCREENING Appreciating Our Differences

ARTICLE 1. Terms { ;1}

Texas Tech University Health Sciences Center HIPAA Privacy Policies

HIPAA PRIVACY RULE: WHEN TO OBTAIN AUTHORIZATIONS TO USE AND DISCLOSE PROTECTED HEALTH INFORMATION

What do you need? Copy of HIPAA Policy on Accounting for Uses or Disclosures of Protected Health Information Department Disclosure Log(s)

UNIVERSITY STANDARD. Title UNIVERSITY OF NORTH CAROLINA AT CHAPEL HILL STANDARD ON HIPAA SANCTIONS. Introduction

State of Vermont Agency of Human Services, acting by and through its Department of Vermont Health Access, & DXC Technology

IHDE BUSINESS ASSOCIATE AGREEMENT (BAA)

HEALTH INSURANCE PORTABILITY AND ACCOUNTABILITY ACT BUSINESS ASSOCIATE TERMS AND CONDITIONS

EXTERNAL IRB AUTHORIZATION AGREEMENT

HIPAA Policy 5032 Statement of Policy on Use and Disclosure of Protected Health Information for Research Purposes

HIPAA Policy Minimum Necessary Use December 1, 2015

SUBJECT: Disclosure and accounting of protected health information (PHI).

HARVARD CATALYST DATA USE AGREEMENT FOR LIMITED DATA SETS

LIMITED DATA SET REQUEST AND DATA USE AGREEMENT

HIPAA PRIVACY AND SECURITY AWARENESS

Addendum to SMART IRB Agreement. Flexible Terms

Texas Tech University Health Sciences Center El Paso HIPAA Privacy Policies

USE OF PROTECTED HEALTH INFORMATION ( PHI ) FOR MARKETING PURPOSES

SCHEDULE D HIPPA BUSINESS PARTNER AGREEMENT

Pursuing Research with an External Collaborator. June 6, 2018

RECIPROCAL BUSINESS ASSOCIATE AND DATA USE AGREEMENT BETWEEN THE PARTICIPATING PHYSICIAN ORGANIZATION AND MILLIMAN, INC.

Rule. Research Changes to the Privacy Rule and GINA. Heather Pierce, JD, MPH Senior Director and Regulatory Counsel, Scientific Affairs

HIPAA STUDENT ASSOCIATE AGREEMENT

Application Checklist for Expedited or Full Review

To inform the UAMS workforce about the requirements for a patient s request to amend medical records or Protected Health Information (PHI).

ELECTRONIC MEDICAL RECORD ACCESS AGREEMENT

PsyBar, LLC 6600 France Avenue South, Suite 640 Edina, MN Telephone: (952) Facsimile: (952)

UConn Health Office of Clinical & Translational Research Standard Operating Procedures

Presented by Marti Arvin Chief Compliance Officer UCLA Health Sciences

NOTICE OF PRIVACY PRACTICES

HIPAA & The Medical Practice

1. Full Name. 2. Today's Date. 3. CDE Activity Title. 4. CDE Activity Date. Page 1 MM DD YYYY. Today's Date / / MM DD YYYY. CEPD Activity Date / /

USE AND DISCLOSURE REQUIRING AUTHORIZATION. Identifies when Facilities may use and disclose PHI of patients pursuant to an Authorization.

PRIVACY STANDARDS OVERVIEW

MASTER COMMON RECIPROCAL INSTITUTIONAL REVIEW BOARD AUTHORIZATION AGREEMENT

Application for Approval of Projects Which Use Human Subjects

HIPAA s Medical Privacy Standards:

HIPAA Information. Who does HIPAA apply to? What are Sync.com s responsibilities? What is a Business Associate?

Saturday, April 28 Medical Ethics: HIPAA Privacy and Security Rules

Secondary Use of Data and Specimens

HIPAA BUSINESS ASSOCIATE AGREEMENT BUSINESS ASSOCIATES AND SUBCONTRACTORS

UPMC POLICY AND PROCEDURE MANUAL

Emma Eccles Jones College of Education & Human Services

MNsure Certified Application Counselor Services Agreement with Tribal Nation Attachment A State of Minnesota

Business Associate Agreement Health Insurance Portability and Accountability Act (HIPAA)

University of Wisconsin-Madison Policy and Procedure

AFFILIATION AGREEMENT BETWEEN HOSPITAL/CLINICAL SITE AND STATE UNIVERSITY OF NEW YORK

Health Insurance Portability and Accountability Act (HIPAA) Terms and Conditions For Business Associates

NEW JERSEY NOTICE FORM

PATTERSON MEDICAL SUPPLY, INC. HIPAA BUSINESS ASSOCIATE AGREEMENT WITH CUSTOMERS

4/5/2013 I. BACKGROUND HIPAA OMNIBUS FINAL RULE. Background. Webinar Series Part II Research and Marketing April 9, 2013

HIPAA Omnibus Final Rule and Research

AMERICAN CANCER SOCIETY, INC. FINANCIAL CONFLICT OF INTEREST POLICY FOR PROMOTING OBJECTIVITY IN RESEARCH

BUSINESS ASSOCIATE AGREEMENT W I T N E S S E T H:

Compliance Considerations Related To Clinical Trials. Daniel Shapiro Director, Research Compliance

INDEPENDENT RESEARCHER AGREEMENT APPLICATION

"HIPAA RULES AND COMPLIANCE"

Security and Privacy Policies

Business Associate Agreement For Protected Healthcare Information

INSTITUTIONAL REVIEW BOARD FOR PROTECTION OF HUMAN SUBJECTS INFORMATION AND GUIDELINES FOR PROPOSAL APPROVAL OR EXEMPTION

UNIVERSITY PHYSICIANS OF BROOKLYN MEDICAL CENTER UNIVERSITY PHYSICIANS OF BROOKLYN POLICY AND PROCEDURE

JOTFORM HIPAA BUSINESS ASSOCIATE AGREEMENT

Transcription:

This form is to be used in conjunction with the Application for IRB Review Study Title: Sponsor/Funding Agency (if funded): Principal Investigator Name: A. What is the purpose of this form? The HIPAA Privacy Standard at 45 CFR 164.512(i) requires that certain criteria be met in order to grant a waiver of individual authorization for research uses of Protected Health Information In addition to these criteria, the federal Common Rule (45 CFR 46 section 116(d)) stipulates that whenever appropriate, the subjects will be provided with additional pertinent information after participation. Which type of waiver is this request for? TOTAL WAIVER When a total waiver of the HIPAA Authorization is requested, the lead researcher is requesting permission to access, use or disclose a research subject s PHI for his or her research study without seeking the subject s specific authorization for that use or disclosure. PARTIAL WAIVER When a partial waiver is requested, the lead researcher is requesting the HIPAA Research Authorization be waived for a portion of the study, such as a waiver for subject identification or recruitment purposes. Note: A partial waiver for subject selection and recruitment requires written HIPAA Research Authorization for further access to protected health information. Examples: 1. A researcher may request a partial waiver of HIPAA Research Authorization to recruit potential subjects if the patients have signed the UC Notice of Privacy Practices. 2. A researcher may request a partial waiver of HIPAA Research Authorization to allow a treating physician to obtain verbal permission to disclose name and contact information of a patient interested in being contacted by the researcher for further study information.

Please specify the purpose for which you are requesting the (total or partial) waiver: Please respond to every question on this application. Incomplete applications will be returned, and will result in a delay of your study being reviewed. 1. Does the use or disclosure of PHI involve no more than minimal risk to the privacy of the individual, based on at least the presence of the following: a. An adequate plan to protect the identifiers from improper use and disclosure. b. An adequate plan to destroy identifiers at the earliest opportunity consistent with the conduct of the research, unless there is a health or research justification for retaining the identifiers or as otherwise required by law. c. Adequate written assurances that the protected health information will not be reused or disclosed to another person or entity, except as required by law, for authorized oversight of the research study, or other research for which the use or disclosure of PHI would be permitted. 2. Describe in detail, the plan to protect the identifiers (names, addresses, telephone numbers, social security numbers, medical record numbers, photos, and other identifying information etc.) from improper use and disclosure. Describe your data security methods. The use of encryption software is required if identifiers are going to be stored. 3. Describe the plan to destroy the identifiers at the earliest opportunity, or provide justification for retaining the identifiers. 4. Will granting a waiver adversely affect the privacy rights of the individual? Please explain your answer:

5. Could the research be practicably done without the waiver? If no justify below: 6. Could the research practicably be done without access to, use or disclosure of the PHI identified below? Fully identify the PHI that will be used under this waiver request: (E.g. Full or partial Medical Records, including laboratory reports, progress notes for certain dates, etc.) 7. Are the privacy risks to individuals whose PHI will be used or disclosed reasonable in relation to the anticipated benefit, if any, to the research? (Please describe your risk/benefit analysis relating to the waiver request below.) 8. If the Lead Researcher is applying for a partial waiver for subject identification, describe how potential subjects will be identified:

9. Will the Principal Investigator be the only member of the research team who will access, use or disclose PHI? If no, please name all of the individuals who will have access to PHI during the research study, including students. As PI, you must ensure that these individuals have current Human Subjects Training & HIPAA Training. These individuals must also be listed as part of key personnel in the project roster of your IRB application. (Add more rows if necessary) Name, Job Description/Role

By signing this form, I attest that the protected health information will not be reused or disclosed to another person or entity, except as required by law, for authorized oversight of the research study, or other research for which the use or disclosure of PHI would be permitted. If all of these criteria are met, the IRB may grant a Waiver of Authorization. The IRB s action will be documented and communicated to the Principal Investigator. INVESTIGATORS AGREEMENT: As Principal Investigator of this study, I assure the Office of Research Integrity that the following statements are true: The information that is provided in this form is true and accurate. I will seek and obtain prior written approval from the IRB for any substantive modifications to the proposal, including but not limited to, changes in procedures and co-investigators. I will report in writing any significant new findings that develop during the course of this study that may affect the risks and benefits to the individuals whose PHI is being obtained. I will not begin my research, including subject identification or recruitment, until I have received written notification of IRB approval and will comply with all IRB requests to report on the status of the study. I will not reuse or disclose any PHI to any other person or entity, except as required by law, for the authorized oversight of research or for other permitted research. I will conduct the research in compliance with all applicable federal and state laws and regulations and UCR policies governing human subject research. Signature of Principal Investigator Date FACULTY ADVISOR AGREEMENT: Student Research (i.e., research performed by medical students, graduate students, residents, or fellows) requires the approval of your Faculty Advisor. As an Advisor to the Student Investigator, I assume responsibility for ensuring that the Student complies with all applicable federal and state laws and regulations as well as UCR policies governing human subject research. Not Applicable Signature of Faculty Advisor Date