Impact of the Health Insurance Portability and Accountability Act (HIPAA) on medical research

Impact of the Health Insurance Portability and Accountability Act (HIPAA) on medical research
The Health Insurance Portability and Accountability Act (HIPAA) is a federal law that was enacted in 1996 to protect the privacy and security of sensitive patient health information. HIPAA applies to health plans, health care clearinghouses, and health care providers that electronically transmit health information in connection with certain transactions. HIPAA also regulates the use and disclosure of protected health information (PHI) by these covered entities and their business associates.

HIPAA has significant implications for medical research, as it affects how researchers can access, use, and share PHI for research purposes. HIPAA requires that researchers obtain written authorization from patients before using or disclosing their PHI for research, unless the authorization requirement is waived by an Institutional Review Board (IRB) or a Privacy Board. HIPAA also requires that researchers follow the minimum necessary standard, which means that they should only request, use, or disclose the minimum amount of PHI needed to accomplish the research purpose.

HIPAA aims to balance the protection of patient privacy with the promotion of high-quality health care and public health. However, some researchers have argued that HIPAA imposes unnecessary burdens and barriers on medical research, such as increasing administrative costs, delaying research projects, reducing patient recruitment, and limiting data sharing. A study by the University of Michigan found that there was a decrease from 96% to 34% in the proportion of heart attack victims completing follow-up studies after the implementation of HIPAA . Other researchers have suggested that HIPAA may have positive effects on medical research, such as enhancing patient trust, improving data quality, and facilitating multi-site collaborations.

In conclusion, HIPAA is an important law that protects the privacy and security of patient health information, but it also has significant impacts on medical research. Researchers need to be aware of the HIPAA requirements and comply with them when conducting research involving PHI. Researchers also need to be proactive in communicating with patients, IRBs, Privacy Boards, covered entities, and business associates about how they protect PHI and why they need it for research purposes.

References:

: CDC. (2020). Health Insurance Portability and Accountability Act of 1996 (HIPAA). Retrieved from https://www.cdc.gov/phlp/publications/topic/hipaa.html

: HHS. (2003). Summary of the HIPAA Privacy Rule. Retrieved from https://www.hhs.gov/hipaa/for-professionals/privacy/laws-regulations/index.html

: Armstrong, D., Kline-Rogers, E., Jani, S. M., Goldman, E. B., Fang, J., Mukherjee, D., … & Eagle, K. A. (2005). Potential impact of the HIPAA privacy rule on data collection in a registry of patients with acute coronary syndrome. Archives of internal medicine, 165(10), 1125-1129.

: NIH. (n.d.). HIPAA Privacy Rule and Its Impacts on Research. Retrieved from https://privacyruleandresearch.nih.gov/