HIPAA Resources for Pathology
Johns Hopkins Medicine HIPAA Web Site* restricted to oncampus access
JHM Institutional Review Board
Information for Researchers This site from the Department of Health and Human Services contains information specifically for the research community regarding the HIPAA Privacy Rule and how it affects research.
HIPAA Guidance This guidance from the Office of Civil Rights of the Department of Health and Human Services should be consulted if you have specific questions about the HIPAA privacy regulations. It is conveniently organized into 14 sections with questions and answers for each.
Register and secure your research databases before APRIL 14th
Faculty and others who have research databases containing patient data must register these databases with the IRB if the databases are to be used after APRIL 14th, 2003.
You do not need to register a database if you already have IRB approval to collect and use the database. Only databases that are used primarily or solely for research must be registered. See these questions and answers for more details.
Click here to register your database(s). Form 7.1 must be completed to "grandfather" a database that you wish to continue to use after April 14th.
- Note that the "deidentification" provisions of the new HIPAA privacy regulations are extremely stringent; for example, no dates are allowed, so most research databases containing patient data will have to be registered. Databases were previously considered deidentified under IRB rules will probably not meet HIPAA deidentification requirements.
- Note also that additional IRB approval is required if you wish to add new patient data to an existing database, or if you wish to create a new database after April 14th. Further, as before, individual IRB approval is needed for any protocols that use these databases.
Contact Mary Lakin (pager:3-3341) to make arrangements for having your databases moved to an appropriate server in the Pathology computer room. The HIPAA computer security regulations require that databases containing patient data be stored on secure servers. Do not store patient data on your local hard disk.
© Copyright 2002-2009 Johns Hopkins University All Rights Reserved