Health Care Privacy Compliance Handbook, 3rd Edition

Instructions: Use this form to track disclosures to an individual or entity outside of [Covered Entity] of protected health information (PHI) for purposes of research where individual participant HIPAA authorization is not obtained. For example, this form must be used when PHI is disclosed:

• Preparatory to research

• Pursuant to an Institutional Review Board waiver of HIPAA authorization