HIPAA PROVISIONS FOR IRB APPLICATION

If your project includes Protected Health Information (PHI), then address the following issues in your IRB application, in addition to all other sections:

HIPAA Plan:

• Indicate whether the project will involve protected health information (PHI)
• Describe the procedures that will be used to comply with the HIPAA Policy. 
  • Following are examples of information and forms that will need to be included in the plan.
    • Procedures to be used regarding the Notice of Privacy Practices
    • Authorization for Use and/or Disclosure of PHI
      • Procedures to be used in requesting Authorization for Use and Disclosure of PHI from Individuals, or
      • Procedures to be used in requesting a waiver of Authorization from the IRB; or
      • Statement that only “de-identified” individual health information will be used.

• • Request for access to PHI from a Health Care Component within Missouri State

• • Request for access to PHI from a Covered Entity outside of Missouri State
    • Application to Covered Entity for Access to PHI
    • Approval by Covered Entity enabling access to PHI
  • Plan for using other HIPAA procedures and forms, as applicable.

• To ensure that the plan is complete, please review the HIPAA Procedures at * http://privacy.missouristate.edu/hipaa/research/
• Complete information on Health Information Privacy on the office of Human Resources website.

* Link opens in a new window

---

Important :

If you don't have Microsoft Word, you may download and install Microsoft Word Viewer free software to view *.doc documents.

If you don't have Adobe Reader, you may download and install  Adobe Acrobat Reader free software to view the documents in PDF.

---