Activity Preparatory to Research & Decedents

Activity Preparatory to Research

HIPAA also permits a researcher to access PHI from a covered entity if he/she attests in writing that:

• The information is being sought solely to prepare a research protocol or for similar purposes preparatory to research;
• No PHI is to be removed from the covered entity by the researcher; and
• The information being sought is necessary for research purposes.

Research on Decedents

In order to access medical records on decedents, HIPAA requires a researcher to provide a covered entity with written assurances that the information is being sought solely for research on decedents, and is necessary for research purposes. The covered entity has a right to require documentation of the death of the individuals.