Table 1.

Options for Conducting HIPAA-Compliant Practice-Based Research

  • HIPAA authorization by individuals to use their protected health information (PHI)

  • De-identified dataset that contains no PHI

  • Limited dataset with data use agreement

  • IRB waiver of HIPAA authorization