Institutional Review Board
Office for Research

What's New
General Information
eIRB
Templates
VA Investigators
Policy Manual / Member Handbook
Committee Lists / IRB Meetings
Research Subject Information
Education and Training
HIPAA
IRB ListServe
SSBS Information

HIPAA Compliance : The Privacy Rule

Policies

HIPAA Federal Regulations
Final Privacy Rule: Regulation Text
What is the HIPAA Privacy Rule?
Northwestern HIPAA Policy
VA HIPAA Policy and Procedures
The Security Rule Announcement

Information and Questions

Guidance to be reviewed prior completing the HIPAA section of the submission forms (NEW)
General Guidelines
Glossary of Terms
FAQs
Recruitement scenarios and FAQs on recruitment (NEW)
HIPAA Revision Announcement 12.13.06

HIPAA Revision Announcement regarding the implementation of the Business Associate Agreement under HIPAA (NEW)

Forms/Guidance

  Title Version Date Guidance
1. HIPAA Waiver of Authorization Form 4/24/06 Use to request a waiver from authorization. See the full policy for an explanation of the terms of requesting a waiver.
2. Description of Limited Data Set and Activities 2/1/07 Use when you receive a limited data set from NMH, NMFF, or RIC. Please contact the Office of the Protection of Research Subjects prior to completion of this form.
3. HIPAA Security Rule Acknowledgement Form 7/11/05 Use when you receive a limited data set via electronic media, from NMH, NMFF, or RIC, or if you are participating in the recruitment of study subjects from NMH, NMFF, or RIC involving the receipt of electronic PHI from these healthcare providers, for the purpose of contacting potential study subjects.
4. Data Use Agreement 1/10/05 To be used in conjunction with a request to use a Limited Data Set. Please contact the Office for the Protection of Research Subjects if you receive a Limited Data Set.
5.  Revocation of Authorization Template 11/01/04 It is not necessary to submit this form to the IRB. A Principal Investigator can use this form if one subject wants to revoke his/her HIPAA authorization. Note that the PI has to report the number of revocations on the periodic review form.