HHS OCR Issues New HIPAA Research Guidance

    View Authors January 2018

    In accordance with the requirements of the 21st Century Cures Act (Public Law 114-255), the US Department of Health and Human Services (HHS) Office for Civil Rights released, in December 2017, a series of new guidance tools intended to improve public understanding of how the Health Insurance Portability and Accountability Act (HIPAA) protects privacy while also improving and promoting health and healthcare.

    Of note for covered entities, two of the newly released documents contain helpful information regarding permissible uses and disclosures of protected health information (PHI) for research purposes under HIPAA. As described more fully on our Security & Privacy // Bytes blog, the documents contain some new information and collate guidance that was previously spread across multiple sources regarding research authorizations, revocations and "reviews preparatory to research" (including when researcher remote access is permissible).

    If you have any questions about the new HIPAA research guidance or any other healthcare privacy or security issues, please contact the authors or your usual firm lawyer.