IRB application, q. 32-33

Today we are going to examine q. 32-33 of the IRB application which is concerned with Protected Health Information. Let's start with what is considered protected health information: 

*Protected Health Information (PHI) is defined under HIPAA (Health Insurance Portability and Accountability Act of 1996) as health information transmitted or maintained in any form or medium that: 

A. identifies or could be used to identify an individual;

B. is created or received by a healthcare provider, health plan, employer or healthcare clearinghouse; and

C. relates to the past, present or future physical or mental health or condition of an individual; the provision of health care to an individual; or the past, present or future payment for the provision of healthcare to an individual. 

What would be PHI? Some examples are a person's chart in a hospital or nursing home, and doctor's records. 

q. 32 asks that you identify whether you will be using PHI or not. Note that there are very specific rules about using this sort of information.

q. 33 is completed only if you have indicated that you will use PHI. You must indicate which legal way you will access it – through an Authorization to Use or Disclose PHI for Research Purposes form or through accessing a limited data set with all identifiers removed. 

Next time I will post an updated blog index. Do you have an issue or a question that you would like me to discuss in a future post? Would you like to be a guest writer? Send me your ideas! leann.stadtlander@waldenu.edu