HIPAA Research Authorization
HIPAA Research Authorization Form
Translated HIPAA Research Authorization Forms
Waiver of Research Authorization
Guidance
HIPAA Research Authorization Form
The HIPAA Privacy Rule permits researchers to access, use or disclose protected health information (PHI) for research purposes when a researcher receives formal written authorization from a subject, which permits such use in accordance with the requirements of the Rule at 45 CFR 164.508. The Privacy Officer for the department/college must be named within the Authorization Form.
HIPAA Research Authorization Form (updated 9/25/09)
OSU HIPAA Privacy Officers (updated 4/02/09)
Translated HIPAA Research Authorization Forms
The translated HIPAA Research Authorization forms may be used in situations where a HIPAA Research Authorization is required to use or disclose Protected Health Information in research, the Authorization is not already available in a language understandable to the subject and/or the Investigator does not wish to obtain an alteration/waiver of HIPAA Research Authorization from the IRB or Privacy Board. Investigators using the translated Authorization forms must complete all sections, and are responsible for the accuracy of the forms. For HIPAA Research Authorizations other than the languages provided here, the Principal Investigator will need to either obtain translations or obtain an alteration of HIPAA Research Authorization.
| Chinese (Simplified) |
Russian |
| Chinese (Traditional) |
Somali |
| French |
Spanish |
| Japanese |
Vietnamese |
The translations were made possible courtesy of the OSU Comprehensive Cancer Center.
Waiver of Research Authorization
In certain limited situations, researchers may also access, use or disclose PHI for research without obtaining a written approval from a subject by obtaining a formal waiver of individual authorization from an IRB (use Appendix N of the IRB Application for Initial Review of Human Subjects Research) or Privacy Board (use Waiver of HIPAA Research Authorization).The university-wide Privacy Board reviews requests for waiver of HIPAA Authorization in exempt human subjects research. Only projects that have already been determined by ORRP to meet the regulatory criteria of exempt research will be forwarded to the Privacy Board for consideration (in other circumstances, the IRB acts as the Privacy Board). A decision will be made to approve or disapprove (i.e., authorization required) the request.
Appendix N - Waiver of HIPAA Research Authorization (v.2.2, updated 9/25/09)
