HIPAA in Research

The Health Insurance Portability and Accountability Act of 1996 (HIPAA) has special requirements that WCMC researchers must follow when viewing or handling the protected health information ("PHI") of patients or other individuals for research purposes. These research provisions, as dictated by the HIPAA Privacy Rule and HIPAA Security Rule, are explained in the guide below.

A Guide to HIPAA in Research

Please note that when handling patient or research subject information, do not use email. Use only the messaging functionality within Epic, or the WCMC File Transfer Service.