Guidance
Dec 15, 2021

Waivers and Alterations under OHRP, FDA and HIPAA

Common Rule regulations and FDA guidance , and HIPAA regulations each allow for an IRB to approve research that departs from the usual requirements regarding the participant’s free and informed decision to participate in the study, or regarding the...
Guidance
Sep 21, 2020

Waiver or Alteration of HIPAA Authorization

To use and/or disclose Protected Health Information (PHI) for research purposes , the HIPAA Privacy Rule in general requires that researchers obtain signed authorization from the individual. An IRB can grant a Waiver of HIPAA Authorization to permit...
Guidance
Sep 9, 2020

De-identified Data Sets

NOTE : This page provides HIPAA -related guidance on “ de-identified data sets,”applicable only to data based on Protected Health Information (usually medical records). Other federal regulations enforced by the IRB have different standards and...
Guidance
Aug 31, 2020

Certification Preparatory to Research

Review of data and/or biospecimens preparatory to research are not regulated under the Common Rule if any data obtained is not used for future research. However, if you or any member of the study team will be accessing Protected Health Information (...
Guidance
Aug 10, 2020

HIPAA

The Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule governs the use and release of a patient's personal health information, also known as Protected Health Information (PHI) , by a covered entity . To use and/or disclose PHI...
Guidance
Aug 10, 2020

Protected Health Information (PHI)

Protected Health Information (PHI) is individually identifiable health information held or maintained by covered entities , or by business associates acting for the covered entity. PHI is subject to HIPAA Privacy Rule protections. HIPAA Privacy Rule...
Guidance
Aug 10, 2020

Uses & Disclosures of Protected Health Information (PHI)

Protected Health Information (PHI) is individually identifiable health information held or maintained by covered entities , or by business associates acting for the covered entity. PHI is subject to HIPAA Privacy Rule protections. HIPAA Privacy Rule...
Guidance
Aug 10, 2020

Decedents

Research involving data and/or biospecimens from decedents (deceased i ndividuals) is not regulated under the Common Rule. However, if you or any member of the study team will be accessing Protected Health Information (PHI) of the decedent(s), the...
Guidance
Aug 10, 2020

Limited Data Sets

Research on coded private information , or on non-identifiable information, is not regulated under the Common Rule . However, HIPAA Privacy Rule protections apply if a coded or non-identifiable data set contains Protected Health Information (PHI) in...
Informational
Nov 22, 2017

Handling Patient Data General Security Guidelines

To minimize the risk of unauthorized disclosure of patient data and other sensitive information, data security must be a top priority for all. Research performed at the University of Michigan is governed by related institutional policies.
Policies
Jun 15, 2017

Institutional Review Board Oversight Policy

This policy is to ensure that Central Biorepository (“CBR”) operations, and research projects facilitated by the CBR, undergo appropriate ethics committee review to protect human research subjects.
Guidance
Feb 17, 2017

Responsibility for REP Oversight and Compliance

REP application and Application Supplement Form capture several different levels and types of information about a repository's processes and intents, including: information characterizing a repository to identify useful relationships for researchers...
Guidance
Jul 10, 2020

eResearch Cross-Reference Table

These documents provide direction on consistency in application changes for the most common changes to the eResearch (IRB) application and the supporting materials. The "Table" indicates correspondences between all eResearch sections for certain...