The Privacy Rule regulates the way certain health care groups, organizations, or businesses, handle the individually identifiable health information known as protected health information (PHI) Researchers should be aware of the Privacy Rule because it establishes the conditions under which covered entities can use or disclose PHI for many purposes, including for research. Although not all researchers will have to comply with the Privacy Rule, the manner in which the Rule protects PHI could affect certain aspects of research.

Training is required if research involves the Privacy Rule. The cost for training varies. Please see the following link for more information on HIPAA.

National Institutes of Health: HIPAA Privacy Rule