Skip to main content

Secondary navigation:

Health Insurance Portability and Accountability Act

hipaa and research

The Health Insurance Portability and Accountability Act (HIPAA) is the federal legislation that governs all uses and disclosures of Protected Health Information (PHI), for both the living and the dead, in order to protect individual privacy. While Boston College is not a Covered Entity, some research projects may take place within other organizations that are Covered Entities. In such cases, researchers must be prepared to use and control PHI in compliance with the provisions of HIPAA and any commitments the university has agreed to accept in support of its researchers and their research projects.

GET THE FORM: Use of HIPAA Protected Health Information

All applicants to the BC IRB who will be working with health information at or from a Covered Entity are required to complete the Statement on HIPAA Protected Health Information Use as part of the BC IRB application process.

HIPAA Requirements Pertaining to BC Research Projects

If PHI will be obtained from an institution that does not have a Privacy Board, please fill out the Use of HIPAA Protected Health Information (located above) and all other forms as may be appropriate. 


HIPAA and Research Resources

Office for Civil Rights – HIPAA
U.S. Department of Health and Human Services (DHHS)

HIPAA Privacy Rule – Information for Researchers
National Institute of Health (NIH)

HIPAA and the Privacy Rule
Partners Human Research Committee, Partners Healthcare System