The Privacy Rule permits only the minimum necessary amount of information to be accessed under a waiver for research. You will have to identify and justify the specific identifiable health information you will need to the IRB and the waiver will only apply to this information.