The Standards for Privacy of Individually Identifiable Health Information, or Privacy Rule, was issued by the U.S. Department of Health and Human Services with the enacting of the Health Insurance Portability and Accountability Act of 1996 (HIPAA). The Privacy Rule assures that individuals’ health information is properly protected, while allowing the flow of health information needed to provide and promote high quality health care and to protect the public’s health and wellbeing.
In research, it may be necessary for a researcher to create new health information about you or to review information in your medical records as part of your participation. Before being able to do this, the researcher must obtain your authorization to access your health information. As part of the informed consent process, you will receive a description of the type of health information to be viewed or created as part of the research and understand who will view the information, for what purposes and for how long. After reviewing this information, you will be asked to grant permission for the use of your information by providing authorization.
You have the right to revoke or withdraw your authorization for the researcher to use your identifiable health information. If you wish to revoke or withdraw your authorization, you must do so in writing and sent that written revocation to the researcher at his/her mailing address. The researcher will no longer be able to allow you to participate in the research study and will stop collecting any additional identifiable health information about you. However, the researcher may, by law, continue to use the health information about you previously collected, as necessary to maintain the integrity of the research study and make reports to oversight agencies.