Content Among Locally Approved HIPAA Authorization forms for Research

Peter Breese; Cornelis Rietmeijer; William Burman

doi:10.1525/jer.2007.2.1.43

Content Among Locally Approved HIPAA Authorization forms for Research

J Empir Res Hum Res Ethics. 2007 Mar;2(1):43-6. doi: 10.1525/jer.2007.2.1.43.

Authors

Peter Breese¹, Cornelis Rietmeijer, William Burman

Affiliation

¹ Denver Public Health and University of Colorado Health Sciences Center.

PMID: 19385891
DOI: 10.1525/jer.2007.2.1.43

Abstract

THIS STUDY WAS DESIGNED TO ASSESS differences in the content of HIPAA authorization forms now required for clinical research. Authorization forms were collected from 111 institutions, including academic medical centers and commercial Institutional Review Boards. The requirement for an element covering the use of information acquired was fulfilled in 95% of the forms, and 100% had a statement fulfilling the core requirement of a description of the data to be collected. However, only 19% distinguished between entities that could see personal identifiers versus aggregate data. Significant differences existed in how long the disclosure agreement would remain in effect, and complex legalistic language was common. Thus, while research authorization forms technically met the requirements, the complex language and confusion over personal identifiers may raise concerns in prospective research participants.