Human Research Protections (IRB)

HIPAA Compliance

man looking at monitor

protecting health information used in research

The mission of the HIPAA Compliance Program is to facilitate researchers' access to Protected Health Information (PHI) to further research and ensure compliance with the Health Insurance Portability and Accountability Act (HIPAA) of 1996 (a.k.a. the "Privacy Rule"). The purpose of the HIPAA Compliance Program is to ensure that research studies involving the use, disclosure or collection of PHI are conducted with the utmost respect to the study participants' privacy and confidentiality rights, thereby preserving and maintaining public trust in the University.

Scope

The HIPAA Compliance Program extends directly or indirectly to any researcher who is conducting research using PHI, whether the researcher's primary appointment is with a 国产短视频Covered Component or not. The HIPAA Compliance Program also renders service to 国产短视频affiliates whose studies involve PHI. For more information regarding the HIPAA Program:
Email HIPAA-research@usf.edu

Forms and Templates

WEB-BASED HIPAA COURSES

For 国产短视频Health

HIPAA education is mandatory for 国产短视频Health faculty, staff, students, residents, and fellows who are in the 国产短视频Covered Health Care Component. If you are required to complete HIPAA education for 国产短视频Health, you must go to their Web Site to complete it: . If you have any questions or problems with the 国产短视频Health HIPAA training, please contact their Help Desk at (813) 974-6288.

Please Note: The 国产短视频Health HIPAA course  does not meet the 国产短视频IRB requirement for education in human subject protections.

Faq

What is HIPAA?

HIPAA stands for the Health Insurance Portability and Accountability Act of 1996. Among other things, the law includes the Privacy rule, which creates national standards to protect privacy of individuals' protected health information (PHI).

The Privacy Rule has been in effect since April 2003. The 国产短视频 has adopted policies that promote compliance with the Privacy Rule.
Show

What is PHI?

PHI includes all individually identifiable health information (including information in research databases and tissue bank samples with identifiers) held or transmitted by a covered entity or its business associate, in any form or media, whether electronic, paper or oral.

Individually identifiable health information is information, including demographic data, which relates to:

  1. The individual's past, present or future physical or mental health or condition;
  2. The provision of health care to the individual, or
  3. The past, present or future payment for the provision of health care to the individual;
    and that identifies the individual or for which there is a reasonable basis to believe it can be used to identify the individual.

Which groups at the 国产短视频 are subject to the HIPAA Privacy Rule?

Entities covered by HIPAA are health care providers, health plans (including employers' sponsored plans), and health care clearinghouses.

The following entities at 国产短视频are considered covered components:

  • The 国产短视频Health Morsani College of Medicine and its constituent schools and departments (including the 国产短视频School of Physical Therapy and Rehabilitation Sciences)
  • The 国产短视频St. Petersburg Family Study Center, Infant Family Center
  • The 国产短视频College of Pharmacy
  • The 国产短视频Student Health Services
  • The Johnnie B. Byrd, Sr. Alzheimer's Center and Research Institute
  • The 国产短视频College of Behavioral & Community Sciences Department of Communication Sciences and Disorders
  • The University Medical Services Support Corporation (MSSC)
  • The University Medical Service Association (UMSA)
  • Any University administrative personnel or unit if and to the extent that the personnel or unit performs or assists in the performance of a function or activity involving the use or disclosure of individually identifiable health information or as otherwise regulated by the HIPAA Privacy Rule for, on behalf of, or in support of any of the above-listed components

How does the Privacy rule affect me as a researcher?

HIPAA affects an investigator's ability to collect and access existing PHI. The Privacy Rule requires certain procedural steps prior to releasing PHI to any investigator for use in research. This is true whether or not the investigator is in or outside of a 国产短视频covered component. When PHI is to be used or disclosed for research purposes, a HIPAA Authorization must be obtained from the research subjects or a waiver of HIPAA Authorization must be obtained from the Privacy Board/IRB.

How does the Privacy rule affect the recruitment of subjects?

Recommended HIPAA Privacy Practices (Securing Electronic Research Data - As recommended by the 国产短视频Privacy Board) (MS Word)

Policies & Procedures

Resources