When is authorization to disclose protected health information (PHI) not required for research?

Authorization of disclosure for research purposes is not generally required if:

1. a waiver of authorization has been approved
2. the research is on decedents
3. the activity is preparatory to research
4. the research involves a limited data set or de-identified health care information.