When is authorization to disclose protected health information (PHI) not required for research?

Authorization of disclosure for research purposes is not generally required if:

  1. a waiver of authorization has been approved
  2. the research is on decedents
  3. the activity is preparatory to research
  4. the research involves a limited data set or de-identified health care information.

FAQ Topic: