What is 'HIPAA,' and how does it relate to research in social and behavioral fields?

What is 'HIPAA,' and how does it relate to research in social and behavioral fields?

• A. A protocol for obtaining informed consent.
• B. The Health Insurance Portability and Accountability Act; protects PHI; use of PHI in research requires authorization or waiver; de-identification can avoid PHI usage.
• C. A funding agency for health research.
• D. A technique for de-identifying data.

Answer: (B)

HIPAA stands for the Health Insurance Portability and Accountability Act. It protects the privacy and security of individuals’ health information, called protected health information (PHI). In social and behavioral research, PHI may come from medical records, insurance data, or identifiable survey responses, so access to it is not free and requires safeguards. To use PHI in research, you typically need one of two things: the person’s written authorization to use or disclose their PHI, or a waiver of authorization approved by an IRB or Privacy Board if the study meets specific criteria (for example, the research involves minimal risk and obtaining consent is impracticable). If you can de-identify the data so it no longer counts as PHI, you can use it for research without PHI-specific authorization, though you must follow standard de-identification methods and keep the data as secure as required. This framework shapes how researchers handle health information, ensuring privacy while allowing valuable social and behavioral research to proceed when proper protections are in place.

HIPAA stands for the Health Insurance Portability and Accountability Act. It protects the privacy and security of individuals’ health information, called protected health information (PHI). In social and behavioral research, PHI may come from medical records, insurance data, or identifiable survey responses, so access to it is not free and requires safeguards.

To use PHI in research, you typically need one of two things: the person’s written authorization to use or disclose their PHI, or a waiver of authorization approved by an IRB or Privacy Board if the study meets specific criteria (for example, the research involves minimal risk and obtaining consent is impracticable). If you can de-identify the data so it no longer counts as PHI, you can use it for research without PHI-specific authorization, though you must follow standard de-identification methods and keep the data as secure as required.

This framework shapes how researchers handle health information, ensuring privacy while allowing valuable social and behavioral research to proceed when proper protections are in place.