Activity Preparatory to Research & Decedents
Activity Preparatory to Research
HIPAA also permits a researcher to access PHI from a covered entity if he/she attests in writing that:
- The information is being sought solely to prepare a research protocol or for similar purposes preparatory to research;
- No PHI is to be removed from the covered entity by the researcher; and
- The information being sought is necessary for research purposes.
Research on Decedents
In order to access medical records on decedents, HIPAA requires a researcher to provide a covered entity with written assurances that the information is being sought solely for research on decedents, and is necessary for research purposes. The covered entity has a right to require documentation of the death of the individuals.