HIPAA in Research

The Health Insurance Portability and Accountability Act of 1996 (HIPAA) has special requirements that WCM researchers must follow when viewing or handling the protected health information ("PHI") of patients or other individuals for research purposes. These research provisions, as dictated by the HIPAA Privacy Rule and HIPAA Security Rule, are explained in the guide below.

A Guide to HIPAA in Research

Please note that when handling patient or research subject information, do not use email. Use only the messaging functionality within Epic, or the WCMC File Transfer Service.


Remember to take the following exams: 
(Principal Investigators, Co-investigators, Key Staff and anyone involved in research)

All are encouraged to sign a Confidentiality Agreement.


For more helpful HIPAA information, please visit the following:

HIPAA Forms & Downloads

Form 1: Authorization to Use or Disclose Protected Health Information
Form to request approval for Review of Protected Health Information Preparatory to Research
Instructions for using the Review Preparatory to Research Form
HIPAA for Decedents