CINXE.COM

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" lang="en" version="XHTML+RDFa 1.0" dir="ltr" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/terms/" xmlns:foaf="http://xmlns.com/foaf/0.1/" xmlns:og="http://ogp.me/ns#" xmlns:rdfs="http://www.w3.org/2000/01/rdf-schema#" xmlns:sioc="http://rdfs.org/sioc/ns#" xmlns:sioct="http://rdfs.org/sioc/types#" xmlns:skos="http://www.w3.org/2004/02/skos/core#" xmlns:xsd="http://www.w3.org/2001/XMLSchema#"> <head profile="http://www.w3.org/1999/xhtml/vocab"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <meta name="Generator" content="Drupal 7 (http://drupal.org)" /> <link rel="canonical" href="/hipaa" /> <link rel="shortlink" href="/node/302" /> <link rel="shortcut icon" href="https://irb.ucsf.edu/profiles/ucsf_b1gfoot/themes/ucsf_b1gfoot_theme/favicon.ico" type="image/vnd.microsoft.icon" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" /> <meta property="og:image" content="https://irb.ucsf.edu/profiles/ucsf_b1gfoot/themes/ucsf_b1gfoot_theme/img/img-metatag.jpg" /> <meta property="og:image:width" content="940" /> <meta property="twitter:image" content="https://irb.ucsf.edu/profiles/ucsf_b1gfoot/themes/ucsf_b1gfoot_theme/img/img-metatag.jpg" /> <meta property="twitter:card" content="summary" /> <meta property="og:site_name" content="Human Research Protection Program (HRPP)" /> <meta property="twitter:url" content="https://irb.ucsf.edu/hipaa" /> <meta property="og:url" content="https://irb.ucsf.edu/hipaa" /> <meta property="twitter:title" content="HIPAA Requirements and Forms for Research | Human Research Protection Program (HRPP)" /> <meta property="og:title" content="HIPAA Requirements and Forms for Research" /> <title>HIPAA Requirements and Forms for Research | Human Research Protection Program (HRPP)</title> <style type="text/css" media="all"> @import url("https://irb.ucsf.edu/modules/system/system.base.css?srio0y"); @import url("https://irb.ucsf.edu/modules/system/system.messages.css?srio0y"); @import url("https://irb.ucsf.edu/modules/system/system.theme.css?srio0y"); </style> <style type="text/css" media="all"> @import url("https://irb.ucsf.edu/modules/comment/comment.css?srio0y"); @import url("https://irb.ucsf.edu/profiles/ucsf_b1gfoot/modules/contrib/fences/field.css?srio0y"); @import url("https://irb.ucsf.edu/modules/node/node.css?srio0y"); @import url("https://irb.ucsf.edu/modules/search/search.css?srio0y"); @import url("https://irb.ucsf.edu/modules/user/user.css?srio0y"); @import url("https://irb.ucsf.edu/profiles/ucsf_b1gfoot/modules/contrib/views/css/views.css?srio0y"); @import url("https://irb.ucsf.edu/profiles/ucsf_b1gfoot/modules/contrib/ckeditor/css/ckeditor.css?srio0y"); </style> <style type="text/css" media="all"> @import url("https://irb.ucsf.edu/profiles/ucsf_b1gfoot/modules/contrib/ctools/css/ctools.css?srio0y"); @import url("https://irb.ucsf.edu/profiles/ucsf_b1gfoot/modules/b1gfoot/ucsf_b1gfoot_admin_menu/css/ucsf_b1gfoot_admin_menu.css?srio0y"); @import url("https://irb.ucsf.edu/profiles/ucsf_b1gfoot/modules/b1gfoot/ucsf_b1gfoot_sitewizard/css/ucsf_b1gfoot_sitewizard.css?srio0y"); </style> <style type="text/css" media="all"> <![CDATA[/*> </style> <link type="text/css" rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/hopscotch/0.2.5/css/hopscotch.min.css" media="all" /> <link type="text/css" rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/font-awesome/4.4.0/css/font-awesome.min.css" media="all" /> <style type="text/css" media="all"> @import url("https://irb.ucsf.edu/profiles/ucsf_b1gfoot/themes/ucsf_b1gfoot_theme/js/vendor/slick/slick.css?srio0y"); @import url("https://irb.ucsf.edu/profiles/ucsf_b1gfoot/themes/ucsf_b1gfoot_theme/css/screen.css?srio0y"); </style> <style type="text/css" media="all"> <![CDATA[/*> </style> <style type="text/css" media="all"> @import url("https://irb.ucsf.edu/profiles/ucsf_b1gfoot/themes/ucsf_b1gfoot_theme/css/colors/primary/primary-navy.css?srio0y"); @import url("https://irb.ucsf.edu/profiles/ucsf_b1gfoot/themes/ucsf_b1gfoot_theme/css/colors/secondary/secondary-teal.css?srio0y"); </style> <script type="text/javascript" src="https://irb.ucsf.edu/profiles/ucsf_b1gfoot/modules/contrib/jquery_update/replace/jquery/1.12/jquery.min.js?v=1.12.4"></script> <script type="text/javascript" src="https://irb.ucsf.edu/misc/jquery-extend-3.4.0.js?v=1.12.4"></script> <script type="text/javascript" src="https://irb.ucsf.edu/misc/jquery-html-prefilter-3.5.0-backport.js?v=1.12.4"></script> <script type="text/javascript" src="https://irb.ucsf.edu/misc/jquery.once.js?v=1.2"></script> <script type="text/javascript" src="https://irb.ucsf.edu/misc/drupal.js?srio0y"></script> <script type="text/javascript" src="https://irb.ucsf.edu/profiles/ucsf_b1gfoot/modules/contrib/jquery_update/js/jquery_browser.js?v=0.0.1"></script> <script type="text/javascript" src="https://irb.ucsf.edu/misc/form-single-submit.js?v=7.101"></script> <script type="text/javascript" src="https://irb.ucsf.edu/profiles/ucsf_b1gfoot/modules/contrib/entityreference/js/entityreference.js?srio0y"></script> <script type="text/javascript" src="https://irb.ucsf.edu/profiles/ucsf_b1gfoot/modules/b1gfoot/ucsf_b1gfoot_admin_menu/js/ucsf_b1gfoot_admin_menu.js?srio0y"></script> <script type="text/javascript" src="https://irb.ucsf.edu/profiles/ucsf_b1gfoot/modules/b1gfoot/ucsf_eds_profiles/ucsf_eds_profiles_tweaks.js?srio0y"></script> <script type="text/javascript" src="https://cdnjs.cloudflare.com/ajax/libs/hopscotch/0.2.5/js/hopscotch.min.js"></script> <script type="text/javascript" src="https://irb.ucsf.edu/profiles/ucsf_b1gfoot/modules/b1gfoot/y3ti_help/js/y3ti_help.js?srio0y"></script> <script type="text/javascript"> <![CDATA[//><!]]> </script> <script type="text/javascript" src="https://irb.ucsf.edu/profiles/ucsf_b1gfoot/modules/b1gfoot/ucsf_b1gfoot_sitewizard/js/ucsf_b1gfoot_sitewizard.js?srio0y"></script> <script type="text/javascript" src="https://irb.ucsf.edu/profiles/ucsf_b1gfoot/themes/ucsf_b1gfoot_theme/js/vendor/slick/slick.js?srio0y"></script> <script type="text/javascript" src="https://irb.ucsf.edu/profiles/ucsf_b1gfoot/themes/ucsf_b1gfoot_theme/js/vendor/icheck.min.js?srio0y"></script> <script type="text/javascript" src="https://irb.ucsf.edu/profiles/ucsf_b1gfoot/themes/ucsf_b1gfoot_theme/js/build/main.js?srio0y"></script> <script type="text/javascript" src="https://irb.ucsf.edu/profiles/ucsf_b1gfoot/themes/ucsf_b1gfoot_theme/js/vendor/responsive-nav/responsive-nav.min.js?srio0y"></script> <script type="text/javascript" src="https://irb.ucsf.edu/profiles/ucsf_b1gfoot/themes/ucsf_b1gfoot_theme/js/script.js?srio0y"></script> <script type="text/javascript"> <![CDATA[//><!]]> </script> </head> <body class="html not-front not-logged-in page-node page-node- page-node-302 node-type-page slider-secondary ucsf-b1gfoot font--header--granjon slider-secondary-no-image profile--expanded sidebar sidebar--right sidebar-color--grey" > <div id="skip-link"> <a href="#main-content" class="element-invisible element-focusable">Skip to main content</a> </div> <div id="page-wrapper"> <div id="page"> <div class="ucsf-top-header row-full-width no-logo"> <div class="inside"> <ul class="menu"> <li class="first"><a href="https://www.ucsf.edu">University of California San Francisco</a></li> <li><a href="https://www.ucsfhealth.org/">UCSF Health</a></li> <li><a href="https://www.ucsf.edu/search" title="">Search UCSF</a></li> <li><a href="https://www.ucsf.edu/about">About UCSF</a></li> </ul> </div> </div> <div id="header" class="row-full-width"> <div class="inside clearfix"> <h1 id="site-name"> <a href="/" title="Home" rel="home"> Human Research Protection Program (HRPP) </a> </h1> <div class="region region-header"> <div id="block-search-form" class="block block-search"> <div class="content"> <form onsubmit="if(this.search_block_form.value=='Search'){ alert('Please enter a search'); return false; }" action="/hipaa" method="post" id="search-block-form" accept-charset="UTF-8"><div><div class="container-inline"> <h2 class="element-invisible">Search form</h2> <div class="form-item form-type-textfield form-item-search-block-form"> <label class="element-invisible" for="edit-search-block-form--2">Search... </label> <input title="Enter the terms you wish to search for." placeholder="Search..." class="text-input fa fa-search form-text" aria-hidden="" type="text" id="edit-search-block-form--2" name="search_block_form" value="" size="40" maxlength="128" /> </div> <div class="form-actions form-wrapper" id="edit-actions"><input type="submit" id="edit-submit" name="op" value="" class="form-submit" /></div><input type="hidden" name="form_build_id" value="form-c4addScGDoJKmkU-l60HS7JISqIk34W5WuIQh8ZR4uo" /> <input type="hidden" name="form_id" value="search_block_form" /> </div> </div></form> </div> </div> <div id="block-ucsf-b1gfoot-tweaks-header-socialmedia" class="block block-ucsf-b1gfoot-tweaks"> <div class="content"> <div class="nav-social"></div> </div> </div> <div id="block-menu-block-1" class="block block-menu-block"> <div class="content"> <div class="menu-block-wrapper menu-block-1 menu-name-main-menu parent-mlid-0 menu-level-1"> <ul class="menu"><li class="first expanded menu-mlid-3061"><a href="/program-description">About Us</a><ul class="menu"><li class="first leaf menu-mlid-3686"><a href="/contact-us">Contact Us</a></li> <li class="leaf menu-mlid-4061"><a href="/our-team" title="">Our Team</a></li> <li class="last leaf menu-mlid-4911"><a href="/hrpp-job-opportunities">Careers</a></li> </ul></li> <li class="expanded menu-mlid-3691"><a href="/our-services">Our Services</a><ul class="menu"><li class="first leaf has-children menu-mlid-3826"><a href="/device-and-technology-guidance">Device and Technology Guidance</a></li> <li class="leaf has-children menu-mlid-3836"><a href="/training">Education & Training</a></li> <li class="leaf has-children menu-mlid-3751"><a href="/irb-review">IRB Review</a></li> <li class="leaf has-children menu-mlid-3721"><a href="/welcome-iris">iRIS</a></li> <li class="leaf has-children menu-mlid-3786"><a href="/reporting">Post-Approval Reporting/Quality Improvement</a></li> <li class="leaf has-children menu-mlid-3861"><a href="/stem-cell">Stem Cell</a></li> <li class="leaf has-children menu-mlid-3696"><a href="/submissions">Submissions</a></li> <li class="last leaf has-children menu-mlid-4001"><a href="/working-other-institutions">Working with Other Institutions</a></li> </ul></li> <li class="expanded active-trail menu-mlid-3891"><a href="/recruitment-consent-and-hipaa" class="active-trail">Recruitment, Consent, HIPAA</a><ul class="menu"><li class="first leaf has-children menu-mlid-3901"><a href="/consent">Consent</a></li> <li class="leaf menu-mlid-3916"><a href="/experimental-subjects-bill-rights">Experimental Participants Bill of Rights</a></li> <li class="leaf menu-mlid-4066"><a href="/fda-part-11-compliance-assurances">FDA Part 11 Compliance Assurances</a></li> <li class="leaf menu-mlid-3911"><a href="/federalwide-assurance">Federalwide Assurance (FWA)</a></li> <li class="leaf active-trail active menu-mlid-3896"><a href="/hipaa" class="active-trail active">HIPAA</a></li> <li class="last leaf has-children menu-mlid-3906"><a href="/recruitment">Recruitment</a></li> </ul></li> <li class="leaf menu-mlid-3136"><a href="/news" title="">News</a></li> <li class="last expanded menu-mlid-3921"><a href="/irb-resources" title="">Resources</a><ul class="menu"><li class="first leaf menu-mlid-4111"><a href="/bch-oakland-faqs">BCH Oakland FAQs</a></li> <li class="leaf menu-mlid-3931"><a href="/irb-covid-19-faqs-resources">COVID-19 FAQs</a></li> <li class="last leaf menu-mlid-3926"><a href="/guidance">Guidance A to Z</a></li> </ul></li> </ul></div> </div> </div> </div> </div> </div> <div id="breadcrumb" class="row-full-width"><div class="inside"><h2 class="element-invisible">You are here</h2><div class="breadcrumb"><a href="/">Home</a> > <a href="/recruitment-consent-and-hipaa">Recruitment, Consent, HIPAA</a> > <span class="breadcrumb-page-title">HIPAA</span></div></div></div> <h1 class="title" id="page-title">HIPAA Requirements and Forms for Research</h1> <div class="content-top"> </div> <div id="main-wrapper"> <div id="main" class="clearfix"> <div id="content" class="column"> <div class="inside"> <a id="main-content"></a> <div class="tabs"></div> <div class="region region-content"> <div id="block-system-main" class="block block-system"> <div class="content"> <div id="node-302" class="node node-page slider-secondary clearfix" about="/hipaa" typeof="sioc:Item foaf:Document"> <span property="dc:title" content="HIPAA Requirements and Forms for Research" class="rdf-meta element-hidden"></span><span property="sioc:num_replies" content="0" datatype="xsd:integer" class="rdf-meta element-hidden"></span> <div class="content"> <div class="field field-name-field-body field-type-text-long field-label-hidden"><div class="field-items"><div class="field-item even"><ul> <li><a href="#forms">HIPAA Forms</a></li> <li><a href="#what">What Is HIPAA?</a></li> <li><a href="#training">HIPAA Research Training</a></li> <li><a href="#faqs">FAQs</a></li> <li><a href="#links">HIPAA Links</a></li> </ul> <h2><a id="forms" name="forms"></a>HIPAA Forms</h2> <p>Review your approval letter to determine whether subjects must sign a HIPAA Authorization form.<strong> If required for your study, it is critical that HIPAA Authorization is obtained and adequately stored in each participant's study record. Failure to adequately obtain HIPAA Authorization may result in loss of data.</strong></p> <div class="collapse-item"> <div aria-expanded="true" class="header-text" role="button" tabindex="0"> <p>UCSF</p> </div> <div aria-hidden="false" class="content-text" role="region" tabindex="-1"> <ul> <li><strong>UCSF Health Participant Authorization for Release of PHI for Research</strong> (<strong><a href="/sites/g/files/tkssra6501/f/wysiwyg/ucsf-hipaa-authorization-research.pdf" target="_blank">PDF</a></strong>) <ul> <li>The UCSF Health HIPAA authorization form is also the correct form to use for research participants at BCH Oakland, ZSFGH and SFDPH clinics.</li> <li>This UCSF Health Version 2016 clarifies Instructions for Researchers Item 3b. There are no other changes to the document.<strong> </strong>This form should be a fillable PDF; if it’s not working properly in your usual browser, we recommend downloading it using the Chrome browser.</li> <li>You must use the UCSF Health HIPAA form for research conducted at UCSF. See the instructions on page 5 of the form. The authorization form cannot be changed except to fill in the blanks. Submit this form as an <em>Other Study Document</em> in iRIS. See <a href="https://irb.ucsf.edu/hipaa#faqs">more information</a> below.</li> </ul> </li> <li>BCH-Oakland (Benioff Children's Hospital Oakland) HIPAA Authorization for Release of PHI for Research:<strong> </strong>In consultation with Office of Research Business and Integration management, as of 5/17/2024, the BCH Oakland HIPAA form has been retired. For new studies submitted to the IRB after 5/17/2024, please submit the UCSF Health HIPAA form. If the IRB already approved use of BCH Oakland HIPAA form, you can continue to use that form. Participants who signed the BCH Oakland HIPAA form do not need to sign the UCSF Health HIPAA form.</li> <li>Please use the UCSF Health HIPAA Research Authorization translations for non-English-speaking participants.</li> </ul> </div> </div> <div class="collapse-item"> <div aria-expanded="false" class="header-text" role="button" tabindex="0"> <p>Translated versions of the form</p> </div> <div aria-hidden="true" class="content-text" role="region" tabindex="-1"> <p>Review the instructions on the <a href="/consenting-non-english-speakers">Non-English Speakers page</a> if you are obtaining HIPAA authorization from a non-English speaker and/or if the language you need is not listed below. UCOP also provides <a href="http://www.ucop.edu/ethics-compliance-audit-services/compliance/hipaa/hipaa-authorization-forms.html">translated versions</a>.</p> <p>The IRB has made many translated HIPAA Authorization forms available in many different dialects. Study teams must use a translated HIPAA Authorization Form to obtain HIPAA Authorization. The IRB recommends that a translator is used to facilitate a conversation that allows the participant to communicate their language and dialect preference. For immediate enrollments study teams should arrange for translation of the HIPAA Authorization form if it is unavailable.</p> <table border="5"> <tbody> <tr> <td> </td> <td><strong>HIPAA Form</strong></td> <td><strong>Translation Certificate</strong></td> </tr> <tr> <td>Amharic (Ethiopia)</td> <td><a href="/sites/g/files/tkssra6501/f/wysiwyg/ucsf-hipaa-authorization-research%20amharic.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20amharicTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Arabic</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20Arabic.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20Arabic_TCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Armenian (Armenia)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20armenian.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20armenian%20armeniaTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Bengali (Bangladesh)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20bengali.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20bengali%20bangladeshTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Bosnian (Bosnia)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20bosnian.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20bosnian%20bosniaTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Bulgarian (Bulgaria)</td> <td><a href="/sites/g/files/tkssra6501/f/ucsf-hipaa-authorization-research_BG-BG.pdf">PDF</a></td> <td><a href="/sites/g/files/tkssra6501/f/ucsf-hipaa-authorization-research_BG-BG_TCert.pdf">PDF</a></td> </tr> <tr> <td>Burmese (Myanmar)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20burmese.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20burmese%20myanmarTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Chinese - Simplified (China)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20simplified%20chinese%20china.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20simplified%20chinese%20chinaTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Chinese (Hong Kong)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20traditional%20chinese%20hong%20kong.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20traditional%20chinese%20hong%20kongTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Chinese (Taiwan)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20traditional%20chinese%20taiwan.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20traditional%20chinese%20taiwanTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Croatian (Croatia)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20croatian.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20croatian%20crotiaTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>French (Canada)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20french%20canadian.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20french%20canadian%20TCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Georgian (Georgia)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20georgian.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20georgian%20georgiaTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>German (Germany)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20german.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20german%20germanyTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Greek (Greece)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20greek.pdf">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20greek%20greeceTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Gujurati (India)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20gujurati.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20gujurati%20indiaTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Haitian (Haiti)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20haitian.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20haitian%20haitiTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Hebrew (Israel)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20hebrew.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20hebrew%20israelTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Hindi (India)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20hindi.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20hindi%20indiaTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Hmong</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20hmong.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20hmongTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Ilocano</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20llocano.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20llocanoTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Indonesian (Indonesia)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20indonesian.pdf">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20indonesian%20indonesiaTCert.pdf">PDF</a></td> </tr> <tr> <td>Italian (Italy)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20italian_0.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20italian%20italy%20TCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Japanese (Japan)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20japanese.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20japaneseTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Khmer (Cambodia)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20khmer.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20khmer%20cambodiaTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Korean (South Korea)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20korean.PDF" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20korean%20south%20koreaTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Lao (Laos)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20lao.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20lao%20laosTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Malayalam (India)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20malayalam.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20malayalam%20indiaTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Mongolian (Mongolia)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20mongolian.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20mongolian%20mongoliaTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Nepali (Nepal)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20nepali.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20nepali%20nepalTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Pashto</td> <td><a href="/sites/g/files/tkssra6501/f/ucsf-hipaa-authorization-research_pashto.pdf">PDF</a></td> <td><a href="/sites/g/files/tkssra6501/f/ucsf-hipaa-authorization-research_pashto_TCert.pdf">PDF</a></td> </tr> <tr> <td>Persian (Iran)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20persian%20iran.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20persian%20iranTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Persian-Dari (Afghanistan)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20persian%20dari.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20persian%20dari%20afghanistanTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Polish (Poland)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20polish.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20polish%20polandTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Portuguese (Brazil)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20portuguese%20brazil.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20portuguese%20brazilTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Punjabi</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20punjabi.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20punjabiTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Romanian (Romania)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20romanian.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20romanian%20romaniaTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Russian (Russia)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20russian.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20russian%20russiaTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Samoan </td> <td><a href="/sites/g/files/tkssra6501/f/ucsf-hipaa-authorization-research_SM.pdf">PDF</a></td> <td><a href="/sites/g/files/tkssra6501/f/ucsf-hipaa-authorization-research_SM_TCert.pdf">PDF</a></td> </tr> <tr> <td>Spanish (Latin America)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20spanish%20latin%20america.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20spanish%20latin%20americaTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Spanish (Mexico)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20spanish%20mexico.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20spanish%20mexicoTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Spanish (Spain)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20spanish%20spain.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20spanish%20spainTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Spanish (United States)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20spanish%20united%20states.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20spanish%20united%20statesTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Tagalog (Philippines)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20tagalog.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20tagalog%20philippinesTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Telugu (India)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20telugu.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20telugu%20indiaTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Thai (Thailand)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20thai.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20thai%20thailandTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Tibetan</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20tibetan.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20tibetanTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Turkish (Turkey)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20turkish%20turkey.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20turkish%20turkeyTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Ukrainian (Ukraine)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20ukrainian.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20ukrainian%20ukraineTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Urdu (Pakistan)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20urdu%20pakistan.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20urdu%20pakistanTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Vietnamese (United States)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20vietnamese%20united%20states.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20vietnamese%20united%20statesTCert.pdf" target="_blank">PDF</a></td> </tr> <tr> <td>Vietnamese (Vietnam)</td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20vietnamese%20vietnam.pdf" target="_blank">PDF</a></td> <td><a href="https://irb.ucsf.edu/sites/hrpp.ucsf.edu/files/ucsf-hipaa-authorization-research%20vietnamese%20vietnamTCert.pdf" target="_blank">PDF</a></td> </tr> </tbody> </table> </div> </div> <div class="collapse-item"> <div aria-expanded="true" class="header-text" role="button" tabindex="0"> <p>Data Use Agreement</p> </div> <div aria-hidden="false" class="content-text" role="region" tabindex="-1"> <p>Work with UCSF <a href="https://icd.ucsf.edu/material-transfer-and-data-agreements">Industry Contracts Division</a> to determine if a Data Use Agreement is necessary.</p> </div> </div> <div class="collapse-item"> <div aria-expanded="true" class="header-text" role="button" tabindex="0"> <p>SFVAHCS Forms</p> </div> <div aria-hidden="false" class="content-text" role="region" tabindex="-1"> <p><a href="/sites/g/files/tkssra6501/f/sfvamc-hipaa-authorization.pdf">SFVAHCS Authorization for Release of PHI for Research</a> — Submit as an Other Study Document or VA Form in iRIS. <strong>Please download the file and open it in Adobe or Firefox prior to editing.</strong></p> <p><a href="/sites/g/files/tkssra6501/f/sfvamc-authorization-revocation.pdf" target="_blank">SFVAHCS Revocation of Authorization for Release of PHI</a> — <strong>Please download the file and open it in Adobe prior to editing.</strong></p> </div> </div> <div class="collapse-item"> <div aria-expanded="true" class="header-text" role="button" tabindex="0"> <p>HIPAA Revocation of Authorization</p> </div> <div aria-hidden="false" class="content-text" role="region" tabindex="-1"> <p>Use the <a href="https://irb.ucsf.edu/sites/g/files/tkssra6501/f/hipaa-cancellation.pdf">HIPAA Revocation of Authorization</a> form to revoke permission for researchers to use or disclose identifiable information for research.</p> </div> </div> <p><strong>Authorizations to Be Used at Other Hospitals or Institutions</strong></p> <p>Other hospitals, medical centers, institutions or clinics will likely have their own HIPAA authorization forms. Those forms should be used at the other sites, just as the UCSF form must be used at UCSF.</p> <p><a id="what" name="what"></a><span style="font-family: GranjonLTW01-Roman, Granjon, Garamond, serif; font-size: 33px; font-weight: normal;">What Is HIPAA?</span></p> <p class="bodyText">The <a href="https://www.hhs.gov/programs/hipaa/index.html" target="_blank">Health Insurance Portability and Accountability Act (HIPAA)</a>, also known as “The Privacy Rule,” set standards and regulations to protect patients from inappropriate disclosures of their protected health information (PHI) that could cause harm to their insurability, employability and/or their privacy.</p> <p class="bodyText">HIPAA allows for researchers to access and use PHI when necessary to conduct research. Not all research is subject to HIPAA regulations; HIPAA only affects research that uses, creates or discloses PHI. Review the sections below and visit the <a href="http://hipaa.ucsf.edu/">UCSF HIPAA website</a> for more info.</p> <div class="collapse-item"> <div aria-expanded="true" class="header-text" role="button" tabindex="0"> <p><a class="accordion">What is PHI?</a></p> </div> <div aria-hidden="false" class="content-text" role="region" tabindex="-1"> <p class="bodyText">Protected health information (PHI) is any information in the medical record or designated record set that can be used to identify an individual and that was created, used or disclosed in the course of providing a health care service such as diagnosis or treatment.</p> <p class="bodyText">HIPAA defines <a href="#identifiers">18 specific identifiers</a> that create PHI when linked to health information. HIPAA regulations allow researchers to obtain approval to access and use PHI when necessary to conduct research. </p> <p class="bodyText">Examples of studies that involve the use of PHI:</p> <ul> <li>Studies that involve the review of existing health records, such as retrospective chart review or other studies that involve the abstraction of data from the subject’s health record for research purposes.</li> <li>Studies that create new medical information because a health care service is being performed as part of research. For example, most studies that diagnose a health condition or involve new drugs or devices create PHI that will be entered into the medical record.</li> </ul> </div> </div> <div class="collapse-item"> <div aria-expanded="true" class="header-text" role="button" tabindex="0"> <p><a id="identifiers" name="identifiers"></a><a class="accordion">What is the list of 18 identifiers?</a></p> </div> <div aria-hidden="false" class="content-text" role="region" tabindex="-1"> <p>HIPAA defines 18 specific identifiers that create PHI when linked to health information:</p> <ol> <li>Names</li> <li>All geographical subdivisions smaller than a State, including street address, city, county, precinct, zip code, and their equivalent geocodes, except for the initial three digits of a zip code, if according to the current publicly available data from the Bureau of the Census: (1) The geographic unit formed by combining all zip codes with the same three initial digits contains more than 20,000 people; or (2) The initial three digits of a zip code for all such geographic units containing 20,000 or fewer people is changed to 000.</li> <li>All elements of dates (except year) for dates directly related to an individual, including birth date, admission date, discharge date, date of death; and all ages over 89 and all elements of dates (including year) indicative of such age, except that such ages and elements may be aggregated into a single category of age 90 or older</li> <li>Phone numbers</li> <li>Fax numbers</li> <li>Electronic mail addresses</li> <li>Social Security numbers</li> <li>Medical record numbers</li> <li>Health plan beneficiary numbers</li> <li>Account numbers</li> <li>Certificate/license numbers</li> <li>Vehicle identifiers and serial numbers, including license plate numbers</li> <li>Device identifiers and serial numbers</li> <li>Web Universal Resource Locators (URLs)</li> <li>Internet Protocol (IP) address numbers</li> <li>Biometric identifiers, including finger and voice prints</li> <li>Full face photographic images and any comparable image</li> <li>Any other unique identifying number, characteristic, or code (note this does not mean the unique code assigned by the investigator to code the data)</li> </ol> <p>There are also additional standards and criteria to protect individual's privacy from re-identification. Any code used to replace the identifiers in datasets cannot be derived from any information related to the individual and the master codes, nor can the method to derive the codes be disclosed. For example, the unique code cannot include the last four digits (in sequence) of the social security number. Additionally, the researcher must not have actual knowledge that the research subject could be re-identified from the remaining identifiers in the PHI used in the research study. In other words, the information would still be considered identifiable is there was a way to identify the individual even though all of the 18 identifiers were removed.</p> </div> </div> <div class="accordian-content"> <div class="collapse-item"> <div aria-expanded="true" class="header-text" role="button" tabindex="0"> <p><a class="accordion">What is not PHI?</a></p> </div> <div aria-hidden="false" class="content-text" role="region" tabindex="-1"> <p class="pageLabel">Some research studies do not use, create or disclose PHI and are not subject to HIPAA regulations.</p> <p>For example, some studies use individually identifiable health information that includes personal identifiers such as name, date of birth or address. However, it is not considered to be PHI because the data are not (i) obtained or generated as part of a health care service (treatment, payment, operations, medical records), (ii) entered into a medical record, or (iii) used to make treatment decisions.</p> <p class="bodyText">Examples of studies that use research health information only and are not subject to HIPAA:</p> <ul> <li>Studies that obtain data from subjects during interviews or surveys, and the investigators do not review or alter the subjects' health records or make treatment decisions as part of the research <strong>(see Exception below)</strong></li> <li>Studies that obtain data from records open to the public or existing research records <strong>(see Exception below)</strong></li> <li>Studies that use tests that do not go into the medical record because they are part of a basic research study and the results will not be disclosed to the subject <strong>(see Exception below)</strong></li> </ul> <p class="bodyText">Also, health information by itself without the <a href="#identifiers">18 identifiers</a> is not considered to be PHI. For example, a dataset of vital signs by themselves do not constitute protected health information. However, if the vital signs dataset includes medical record numbers, then the entire dataset must be protected since it contains an identifier.</p> <p class="bodyText">Data that is not subject to HIPAA is generally still regulated by other human subjects protection regulations. Please protect and manage the data with the same level of data security and care as PHI.</p> <p class="bodyText"><strong>Exception: HIPAA regulations apply to all VA studies that access/use/disclose PHI from <u>any</u> source, including but not limited to data obtained from subjects during interviews or surveys, existing research records, and tests that do not got into the medical record.</strong></p> </div> </div> <ul> </ul> </div> <div class="collapse-item"> <div aria-expanded="true" class="header-text" role="button" tabindex="0"> <p><a class="accordion">Does HIPAA apply to my research?</a></p> </div> <div aria-hidden="false" class="content-text" role="region" tabindex="-1"> <p>The chart below summarizes to which studies HIPAA regulations may apply. There may be exceptions to these very general guidelines.</p> <table border="1" cellpadding="0" cellspacing="0"> <tbody> <tr> <td> <p>Study data are </p> <ul> <li>Derived from a medical record.</li> <li>Added to the hospital or clinical medical record.</li> <li>Created or collected as part of health care.</li> <li>Used to make health care decisions.</li> </ul> </td> <td> <p><strong>HIPAA regulations apply.</strong></p> </td> </tr> <tr> <td> <p>Study data are only </p> <ul> <li>Obtained from the subject, including interviews, questionnaires.</li> <li>Obtained from a foreign country or countries only.</li> <li>Obtained from records open to the public.</li> <li>Obtained from existing research records.</li> </ul> </td> <td><strong>HIPAA regulations do not apply, except for VA studies where HIPAA regulations do apply.</strong></td> </tr> </tbody> </table> </div> </div> <div class="accordian-content"> <div class="collapse-item"> <div aria-expanded="true" class="header-text" role="button" tabindex="0"> <p><a class="accordion">If HIPAA applies, how do I obtain approval to use and/or disclose PHI from research subjects?</a></p> </div> <div aria-hidden="false" class="content-text" role="region" tabindex="-1"> <p>The IRB will act as a Privacy Board (required by HIPAA) to review the use and disclosure of PHI. The IRB will determine whether you can access PHI by one or both methods:</p> <ul> <li>The research subject (or legal representative, when approved) signs the <a href="/hipaa" target="_blank">UCSF Subject Authorization for Release of PHI for Research</a> or <a href="http://hrpp.ucsf.edu/sites/hrpp.ucsf.edu/files/SFVAMC-HIPAA-authorization.pdf" target="_blank">SF VAMC Authorization for Release of PHI for Research</a> to grant permission to use PHI for research</li> </ul> <ul> <li>The IRB grants a <a href="#waiver">waiver of authorization</a> for the entire study <em>or</em> for recruitment purposes only</li> </ul> <p>Your approval letter will identify which method(s) the IRB approved.</p> </div> </div> <h2><a id="training" name="training"></a>HIPAA Research Training</h2> </div> <div class="accordian-content"> </div> <p class="bodyText"><strong><strong style="line-height: 1.538em;">Research Aspects of HIPAA Tutorial (UCSD)</strong></strong>: Investigators, research staff, coordinators and administrators who need to know HIPAA research procedures should take this tutorial (currently unavailable).<strong style="line-height: 1.538em;"> </strong></p> <p class="bodyText">The UC San Diego (UCSD) Human Subjects Protection Program developed this training and made it available to the research community at all the UC Medical Centers. It is targeted to research investigators, but anyone interested may complete the training. After you finish the tutorial, you will receive a completion certificate.</p> <p class="bodyText"><strong>Tracking</strong>: Individual departments are required to track the HIPAA training for their staff. The IRB does not track HIPAA training, although it does expect researchers to complete training. Do not submit HIPAA training certificates to the IRB.</p> <p class="bodyText"><strong>Non-Research HIPAA Training:</strong> There are other <a href="http://hipaa.ucsf.edu/education/" target="_blank">non-research-related HIPAA training requirements</a> for members of the UCSF workforce, which are tracked and managed by the <a class="large" href="http://hipaa.ucsf.edu/privacyoffice/default.html" style="line-height: 1.538em;" target="_blank">UCSF Privacy Office</a>.</p> <h2><a id="faqs" name="faqs"></a>FAQs</h2> <div class="collapse-item"> <div aria-expanded="true" class="header-text" role="button" tabindex="0"> <p><a class="accordion">What is individually identifiable health information?</a></p> </div> <div aria-hidden="false" class="content-text" role="region" tabindex="-1"> <p>“Individually identifiable health information” is information, including demographic data, that relates to:</p> <ul> <li> the individual’s past, present or future physical or mental health or condition,</li> <li> the provision of health care to the individual, or</li> <li> the past, present, or future payment for the provision of health care to the individual,</li> </ul> <p>and that identifies the individual or for which there is a reasonable basis to believe it can be used to identify the individual. Individually identifiable health information includes many common identifiers (e.g., name, address, birth date, medical record number). </p> </div> </div> <div class="collapse-item"> <div aria-expanded="true" class="header-text" role="button" tabindex="0"> <p><a class="accordion">What is the subject’s authorization? What do I use at UCSF, SFVAHCS, and other institutions or for sponsors?</a></p> </div> <div aria-hidden="false" class="content-text" role="region" tabindex="-1"> <p>The subject’s authorization for release of personal health information is a required supplement to the standard consent form. It does not change any of the information or permissions described in the consent document.</p> <p>The authorization form includes all of the <a href="http://privacyruleandresearch.nih.gov/authorization.asp" target="_blank">elements required by the federal government</a>. It describes the different ways that the researcher, research team and the research sponsor may use the subject’s PHI for the research study. The subject grants their permission to access their information when they sign this subject authorization form.</p> <p><strong>UCSF: </strong>The University of California has developed the authorization form used at UCSF. All UCSF-affiliated research investigators obtaining subject authorization to use PHI in their studies must complete and use this form without altering the standard text in the form.</p> <p><strong>SFVAHCS: </strong>The <a href="/hipaa#SFVAHCS-Forms">SFVAHCS-specific authorization</a> is required at that site. Therefore, if you are enrolling subjects at the SFVAHCS and UCSF, you will use separate HIPAA authorizations at each site.</p> <p><strong>Other Sites: </strong>Other non-affiliated medical centers and institutions may require you to use their version of the authorization form to access their medical records. The authorization form originates from the covered entity that owns the PHI (usually medical records) for which you are requesting access. However, smaller clinics may accept the UCSF authorization in lieu of their own. You should determine in advance what the HIPAA authorization requirements would be for medical records access.</p> <p><strong>Sponsors: </strong>Industry sponsors may want you to use the sponsor’s authorization form. At UCSF, research investigators will only be allowed to use UCSF authorization form (or SFVAHCS form for research conducted there). <a href="/contact-us">Contact the IRB</a> with questions about sponsor authorization forms.</p> </div> </div> <div class="accordian-content"> <div class="collapse-item"> <div aria-expanded="true" class="header-text" role="button" tabindex="0"> <p><a class="accordion">Can I obtain verbal authorization?</a></p> </div> <div aria-hidden="false" class="content-text" role="region" tabindex="-1"> <div class="accordian-content"> <p>Yes, but only if you have an IRB-approved waiver of authorization that <a href="#waiver">waives</a> the HIPAA requirement for a written authorization.</p> </div> </div> </div> <div class="collapse-item"> <div aria-expanded="true" class="header-text" role="button" tabindex="0"> <p><a id="waiver" name="waiver"></a><a class="accordion">What is a waiver of authorization? How do I request a waiver?</a></p> </div> <div aria-hidden="false" class="content-text" role="region" tabindex="-1"> <p>A waiver of authorization may be granted in situations where an individual’s authorization to access their PHI will not be obtained. The IRB may waive authorization for an entire study or just for recruitment purposes.</p> <p>There are several types of research studies that may a need a waiver of authorization such as:</p> <ul> <li>Reviews of medical records for data collection (chart reviews)</li> <li>Access to databases that have PHI in them</li> <li>Studies that access clinical databases, hospital medical records, appointment logs and other similar databases to identify potential subjects for recruitment or screening purposes</li> <li>Studies that enroll subjects with verbal consent</li> </ul> <p>Note: If the clinic has does not have an IRB-approved recruitment protocol, then each research study will have to obtain an IRB-approved waiver of authorization to screen the clinic’s records for subjects for recruitment purposes. If these potential subjects are later enrolled in research studies, they must sign both the informed consent form and the authorization form.</p> <p>The UCSF IRB, as the Privacy Board for research, is allowed to grant a waiver of authorization if it can certify that the research meets the following criteria:</p> <ol> <li>The use or disclosure of PHI involves no more than a minimal risk to the privacy of individuals, based on, at least, the presence of the following elements <ul> <li>an adequate plan to protect the identifiers from improper use and disclosure </li> <li>an adequate plan to destroy the identifiers at the earliest opportunity consistent with conduct of the research, unless there is a health or research justification for retaining the identifiers or such retention is otherwise required by law </li> <li>adequate written assurances that the PHI will not be reused or disclosed to any other person or entity, except as required by law, for authorized oversight of the research project, or for other research for which the use or disclosure of protected health information would be permitted by this subpart</li> </ul> </li> <li>The research could not practicably be conducted without the waiver or alteration</li> <li>The research could not practicably be conducted without access to and use of the PHI.</li> </ol> <p>The IRB will also expect the research to satisfy the current human subject protection regulations including that the waiver will not adversely affect the rights and welfare of the subject and that the risks are reasonable in relation to the anticipated benefits of the research. Requests for waiver of authorization must be submitted to the IRB and be approved prior to accessing the health information.</p> <p>The IRB Application in iRIS includes questions to determine whether HIPAA authorization is required, or if a waiver of authorization can be granted for the entire study or for recruitment purposes only. The IRB approval letter will document these determinations.</p> <p><strong>HIPAA Waivers for HIV Status:</strong> California state law prohibits the release of HIV test results, whether positive or negative, without the patient’s written permission. The IRB is therefore not permitted to approve a HIPAA waiver to access HIV test results, even for recruitment purposes.</p> <p>Studies that wish to access a previous HIV test result to confirm patients’ (positive or negative) HIV status may do so only after obtaining written HIPAA authorization</p> </div> </div> <div class="collapse-item"> <div aria-expanded="true" class="header-text" role="button" tabindex="0"> <p><a class="accordion">Is IRB approval required for decedent research at UCSF?</a></p> </div> <div aria-hidden="false" class="content-text" role="region" tabindex="-1"> <p>It depends on whether PHI will be accessed and/or whether state, county or local death data files will be accessed, as both the federal and state privacy laws apply. See the <a href="http://hrpp.ucsf.edu/node/307#faqs">FAQ section on the Research Needing IRB Review</a> page for more information.</p> </div> </div> <div class="collapse-item"> <div aria-expanded="true" class="header-text" role="button" tabindex="0"> <p><a class="accordion">What is de-identified data?</a></p> </div> <div aria-hidden="false" class="content-text" role="region" tabindex="-1"> <p>HIPAA allows the patient information to be "…used and disclosed freely, without being subject to the Privacy Rule's protections" if has been de-identified. De-identified PHI has all identifying information removed but the data could be re-identified if necessary, usually through means of a code. This code cannot be derived from any of the elements removed during de-identification, e.g. a unique code cannot be created using the last four digits of a social security number.</p> <p>However, the UC authorization for release of personal health information form does allow for the use of initials, date of birth and dates of medical care as “personally unidentified study data.” Typically, this type of data is used in case report forms (CRF) for quality control purposes where the CRF is verified with the source documents, especially for sponsors.</p> <p>There are two acceptable methods for creating de-identified data (PHI) including the removal of 18 primary and secondary identifiers from the dataset, or, using statistical methods of verifying that the data could not be used to re-identify a research subject. Additionally, the researcher must not have actual knowledge that the research subject could be re-identified from the remaining identifiers in the PHI used in the research study.</p> <p>If you are working with a non-UCSF partner and you want to share your data, the UCSF Privacy office <b>requires</b> that your data are "certified," meaning your dataset is correctly de-identified. UCSF has a <a href="https://data.ucsf.edu/data-assets/de-identification">Data De-identification Validation Service</a> that allows you to verify that your datasets have been de-identified in accordance with HIPAA regulations and obtain the required certification.</p> <p>Some research involving only de-identified data is <a href="/not-human-subjects-research">not human subjects research</a> and does not require IRB review. This determination may depend on the source of the data, who de-identifies the data and the method(s) used to de-identify the data. Review the <a href="/not-human-subjects-research">not human subjects research guidance</a> to determine whether your study needs IRB review.</p> </div> </div> <div class="collapse-item"> <div aria-expanded="true" class="header-text" role="button" tabindex="0"> <p><a class="accordion">What specific identifiers must be removed to create de-identified data?</a></p> </div> <div aria-hidden="false" class="content-text" role="region" tabindex="-1"> <p>The <a href="#identifiers">18 identifiers</a> listed above must be removed for de-identification. If you are working with a non-UCSF partner and you want to share your data, the UCSF Privacy office requires that your data are "certified," meaning your dataset is correctly de-identified. UCSF has a <a href="https://data.ucsf.edu/data-assets/de-identification" target="_blank">Data De-identification Validation Service</a>, which enables you to verify that your datasets have been de-identified in accordance with HIPAA regulations and obtain the required certification.</p> </div> </div> <div class="collapse-item"> <div aria-expanded="true" class="header-text" role="button" tabindex="0"> <p><a class="accordion">What is the statistical method of de-identification?</a></p> </div> <div aria-hidden="false" class="content-text" role="region" tabindex="-1"> <p>A statistical expert must certify that the risk is "very small" that anyone could re-identify the research subjects from the PHI identifiers used in the study. They must document the methods used to determine that data has been rendered de-identified. A statistical expert is someone with "appropriate knowledge and experience with statistical and scientific principles and methods for rendering information not individually identifiable".</p> </div> </div> <div class="collapse-item"> <div aria-expanded="true" class="header-text" role="button" tabindex="0"> <p><a class="accordion">What is a limited dataset?</a></p> </div> <div aria-hidden="false" class="content-text" role="region" tabindex="-1"> <p>A limited dataset is a limited set of identifiable information in which most of the identifiers for the individual, the individual’s relatives, employers and household members have been removed. The only allowable health information identifiers are:</p> <ul> <li>5 digit zip code (the 4 digit extension is not allowed)</li> <li>dates of birth, death, admission, discharge</li> <li>all geographic subdivisions other than street address</li> </ul> <p>The advantages of using a limited dataset include that the disclosures are not subject to HIPAA accounting requirements and that an individual’s authorization does not need to be obtained. However, you may be asked to sign a <a href="http://hipaa.ucsf.edu/documentation/downloads/DataUseAgreement2007Dec.pdf" target="_blank">Data Use Agreement</a> by the purchasing or contracts office of the university or other covered entities to give assurances that the information will be protected.</p> <p>An IRB application is required for studies involving limited datasets.</p> </div> </div> <div class="collapse-item"> <div aria-expanded="true" class="header-text" role="button" tabindex="0"> <p><a class="accordion">Does HIPAA apply to my international study?</a></p> </div> <div aria-hidden="false" class="content-text" role="region" tabindex="-1"> <p>No. U.S. Federal laws do not apply to studies conducted in foreign countries. The standard methods of protecting confidentiality and privacy for research in human subjects still apply and you should have these in place. However, the research subjects do not need to sign an authorization to allow access to their PHI.</p> </div> </div> <div class="collapse-item"> <div aria-expanded="true" class="header-text" role="button" tabindex="0"> <p><a class="accordion">Can databases or registries be created under HIPAA?</a></p> </div> <div aria-hidden="false" class="content-text" role="region" tabindex="-1"> <p>Yes. HIPAA allows for the creation of databases for research purposes. A research database can be created without obtaining individual authorizations, but only with an IRB-approved <a href="#waiver">waiver of authorization</a>. The PHI maintained in the research database may be disclosed for future research studies if the investigator either obtains an individual's authorization or an IRB-approved waiver of authorization.</p> </div> </div> <div class="collapse-item"> <div aria-expanded="true" class="header-text" role="button" tabindex="0"> <p><a class="accordion">How do I protect the PHI in my study?</a></p> </div> <div aria-hidden="false" class="content-text" role="region" tabindex="-1"> <p>Investigators are advised to analyze the flow of PHI through their research projects and develop security policies for both <a href="/electronic-data-security">electronic</a> and hard copy PHI. Simple steps may be all that are required to accomplish the goals of tracking, recovery and security.</p> <ul> <li><strong>A tracking system</strong> is necessary to account for how the PHI is stored, used, and shared, e.g. flow of PHI through your project</li> <li><strong>A recovery plan </strong>simply means having the capability to recover data if you lose your primary database for both your research and for HIPAA accountability of any PHI disclosures</li> <li><strong>A security system </strong>that prevents inadvertent disclosure, loss or theft of PHI from your project is required. For example, to secure physical data, keep files in locked cabinets and locked offices/suites. See the <a href="/electronic-data-security">Electronic Data Security</a> section of our website and consult with your IT professional for more information on securing data electronically.</li> </ul> </div> </div> <div class="collapse-item"> <div aria-expanded="true" class="header-text" role="button" tabindex="0"> <p><a class="accordion">What is a privacy breach? What should I do if PHI may have been disclosed to unauthorized individuals?</a></p> </div> <div aria-hidden="false" class="content-text" role="region" tabindex="-1"> <p>A privacy breach refers to any unauthorized access to PHI and commonly (but not always) is related to electronic files or devices that contain PHI.</p> <p>Contact the <a href="http://hipaa.ucsf.edu/privacy-office" target="_blank">HIPAA Privacy Office</a> (415) 353-2750 and <a href="/contact-us">the IRB</a> (415) 476-1814 <strong>immediately</strong> if you are concerned that there may have been a breach of security for your research files. These offices will work with you to assess the situation to determine who else may need to be notified.</p> <p>For VA studies, please report privacy breaches to the <a href="/cdn-cgi/l/email-protection#6b1d595a180d081b04181f0a0d0d2b1d0a450c041d">VA Privacy Office</a> and <a href="/cdn-cgi/l/email-protection#164024274550555e44464656607738717960">VA HRPP</a> within one hour of awareness.</p> <p>Common examples of breaches:</p> <ul> <li>Talking to the wrong person or sending an email, letter or fax to the wrong address, person or number</li> <li>Lost/stolen or improperly disposed paper documents</li> <li>Lost/stolen unencrypted laptops, tablets, cell phones, media devices (video and audio recordings)</li> <li>Lost/stolen unencrypted CDs, flash drives, memory sticks</li> <li>Hacking of unprotected computer systems</li> </ul> </div> </div> <div class="collapse-item"> <div aria-expanded="true" class="header-text" role="button" tabindex="0"> <p><a class="accordion">Can I send PHI via email?</a></p> </div> <div aria-hidden="false" class="content-text" role="region" tabindex="-1"> <p>Please refer to the <a href="http://hipaa.ucsf.edu/frequently-asked-questions#faq10" target="_blank">UCSF Privacy Office</a> and <a href="https://it.ucsf.edu/services/secure-email" target="_blank">ITS</a> sites for guidance.</p> </div> </div> <div class="collapse-item"> <div aria-expanded="true" class="header-text" role="button" tabindex="0"> <p><a class="accordion">Can I send PHI via FAX?</a></p> </div> <div aria-hidden="false" class="content-text" role="region" tabindex="-1"> <p>Yes, but only to secured fax machines. Never fax information to an unsecured fax machine. A secured fax machine is one that is located in a restricted environment. Recommended best practices include:</p> <ul> <li>Always check the destination fax number before faxing</li> <li>The first time you use a fax destination number, send a cover sheet requesting confirmation that the fax number is authorized to receive the PHI. After you receive the fax number confirmation, keep a copy in your files.</li> <li>Use cover sheets containing the confidentiality statement:</li> </ul> <p style="padding-left: 30px;"><em>This email message is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message</em></p> <ul> <li>Return items you receive that were faxed to the wrong location or improperly faxed and advise the sender of the error.</li> </ul> </div> </div> <div class="collapse-item"> <div aria-expanded="true" class="header-text" role="button" tabindex="0"> <p><a class="accordion">Do I need a Business Associate Agreement (BAA) for my research?</a></p> </div> <div aria-hidden="false" class="content-text" role="region" tabindex="-1"> <p>Maybe. If your research project will contract a vendor outside of UCSF for research-related goods or services and the vendor may potentially be exposed to PHI, then the vendor must have a <a href="http://policies.ucsf.edu/policy/200-28" target="_blank">BAA with UCSF</a> before they begin.</p> <p>Examples of such vendors include (but are not limited to) those that contract statistical services, data management, data hosting and data analysis. Equipment repair vendors that service machines that have PHI stored on them also need to have BAA in place. Additional examples are available on the <a href="http://supplychain.ucsf.edu/hipaa" target="_blank">Supply Chain Management website</a>.</p> <p>The BAA is between the vendor and UCSF, not between the vendor and the investigator. If your project will need this type of research service, you should contact your Purchasing Officer who then will negotiate the BAA on your behalf with the vendor (<a href="http://supplychain.ucsf.edu/hipaa" target="_blank">see these instructions</a>).</p> </div> </div> <div class="collapse-item"> <div aria-expanded="true" class="header-text" role="button" tabindex="0"> <p>Is a specific end date needed in the HIPAA form?</p> </div> <div aria-hidden="false" class="content-text" role="region" tabindex="-1"> <p>No. Per the <a href="https://ohcp.ucsf.edu/">Privacy Office</a>, California’s Confidentiality of Medical Information Act (CMIA) doesn’t require patient authorization to use or disclose PHI for research purposes (Cal. Civil Code Section 56.10(c)(7)). Thus, the UCSF Research Authorization must only contain the HIPAA-required elements, not the CMIA-required ones (such as an specific expiration date). The current HIPAA Research Authorization form has been vetted by UCOP Legal, and is compliant with HIPAA. Under HIPAA, the expiration can be described as a date or event that relates to the patient or the purpose of the use/disclosure. If the authorization is for research, the expiration event can be described as “end of the research study,” “none,” or with similar language, as is stated in our form.</p> </div> </div> <h2><a id="links" name="links"></a>HIPAA Links</h2> <div class="wysiwyg_threecols layout--33-33-33"> <div class="wysiwyg_threecols--first bg--undefined bg--interactive-blue"> <h4>Federal Government</h4> <ul> <li><a href="http://privacyruleandresearch.nih.gov/">HIPAA Privacy Rule Information for Researchers (NIH)</a></li> </ul> </div> <div class="wysiwyg_threecols--second bg--undefined bg--interactive-dark-blue"> <h4>State of California</h4> <ul> <li><a href="https://www.dhcs.ca.gov/formsandpubs/laws/hipaa/Pages/default.aspx">Office of HIPAA Implementation</a></li> <li><a href="http://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?sectionNum=56.10.&lawCode=CIV">California Medical Information Act (CMIA)</a></li> </ul> </div> <div class="wysiwyg_threecols--third bg--undefined bg--interactive-light-navy"> <h4>University of California and UCSF</h4> <ul> <li><a href="http://www.ucop.edu/ethics-compliance-audit-services/compliance/hipaa/">HIPAA Compliance at UC</a></li> <li><a href="http://hipaa.ucsf.edu/privacy-office">UCSF Privacy Office</a></li> </ul> </div> </div> </div> <div class="accordian-content"> <ul> </ul> </div> <div class="accordian-content"> <ul> </ul> </div> <div class="accordian-content"> <ul> </ul> </div> </div></div></div> </div> </div> </div> </div> <div id="block-views-last-updated-block" class="block block-views"> <div class="content"> <div class="view view-last-updated view-id-last_updated view-display-id-block view-dom-id-9a5f751cb2e326200656b2e959d1b2c5"> <div class="view-content"> <div> <p class="updated-date"> <span>Last updated: </span> February 10, 2025 </p> </div> </div> </div> </div> </div> </div> </div> </div> <div id="sidebar" class="column"> <div class="sidebar"> <div class="section"> <div class="region region-sidebar"> <div id="block-block-16" class="block block-block"> <h3>Quicklinks </h3> <div class="content"> <p><a class="btn--large btn--more--reverse btn--full-width" href="https://ucsf.co1.qualtrics.com/jfe/form/SV_06qk41JwVXpOdMx"><font color="yellow">Questions? </font><font color="lightseagreen">Ask Andy</font> (<font color="lightseagreen">An</font>alyst of the <font color="lightseagreen">D</font>a<font color="lightseagreen">y</font>)</a></p> <p> </p> <p><a class="btn--large btn--more--reverse btn--full-width" href="https://iris.ucsf.edu/">Log into iRIS ↗️</a> </p> <p><a class="btn--large btn--more--reverse btn--full-width" href="https://iris-help.ucsf.edu/irb-iris">iRIS Help site</a></p> <p> </p> <p><a class="btn--large btn--more--reverse btn--full-width" href="/submissions">Submissions</a></p> <p> </p> <p><a class="btn--large btn--more--reverse btn--full-width" href="/sites/g/files/tkssra6501/f/where%20is%20my%20study_0.pdf"> check your study status</a></p> <p> </p> <p><a class="btn--large btn--more--reverse btn--full-width" href="/participating-research">Participating in UCSF Research</a></p> <p> </p> <p><a class="btn--large btn--blue btn--full-width" href="https://ucsf.co1.qualtrics.com/jfe/form/SV_3z3mGySSIA907k1?Q_JFE=qdg">iRb SATISFACTION SURVEY</a></p> </div> </div> <div id="block-block-26" class="block block-block"> <h3>Top Resources </h3> <div class="content"> <ul> <li><a href="/quick-guide-activities-requiring-irb-review" target="_blank">Activities Requiring IRB Review</a></li> <li><a href="/news">Bulletins</a></li> <li><a href="https://cancer.ucsf.edu/clinical-research/conducting-cancer-research">Cancer Research Activation Workflow</a></li> <li><a href="/citi-human-subjects-training">CITI Human Subjects Training </a></li> <li><a href="/consent-and-assent-form-templates">Consent Form Templates</a></li> <li><a href="/contact-us">Contact Us</a></li> <li><a href="/irb-covid-19-faqs-resources">COVID-19 FAQ's</a> </li> <li><a href="/guidance">Guidance A to Z</a></li> <li><a href="/hipaa">HIPAA Authorization Form </a></li> <li><a href="/irb-rosters-meeting-dates">IRB Rosters & Meeting Dates</a></li> <li><a href="/hrpp-job-opportunities">Job Opportunities</a></li> <li><a href="/participating-research">Participating in Research</a> </li> <li><a href="/sites/g/files/tkssra6501/f/post-approval-reporting-summary-sheet.pdf">Post-Approval Reporting Requirements</a></li> <li><a href="/reporting-research-concerns-and-complaints">Reporting Research Complaints</a></li> <li><a href="/submissions">Submit to the IRB</a></li> <li><a href="/when-ucsf-can-serve-irb-record" target="_blank">UCSF IRB of Record</a></li> <li><a href="/working-other-institutions">Working with Other Institutions</a></li> </ul> </div> </div> </div> </div> </div> </div> </div></div> <div id="footer"> <div class="section"> <div class="region region-footer"> <div id="block-block-21" class="block block-block"> <div class="content"> <div class="wysiwyg_twocols layout--50-50"> <div class="wysiwyg_twocols--first bg--transparent"> <p>Human Research Protection Program<br /> 490 Illinois Street, Floor 6<br /> San Francisco, CA 94143<br /> Phone: (415) 476-1814</p> <p>Fax: (415) 353-4418<br /> Email: <a href="/cdn-cgi/l/email-protection#69203b2b291c0a1a0f470c0d1c"><span class="__cf_email__" data-cfemail="430a110103362030256d262736">[email protected]</span></a> </p> </div> <div class="wysiwyg_twocols--second bg--transparent"> <p style="text-align: right;"><a class="btn--small btn--more--white" href="https://ucsf.co1.qualtrics.com/jfe/form/SV_8k8x8jRnFhOJ6Xr">Website Feedback </a></p> </div> </div> <p> </p> </div> </div> </div> <div class="footer-bottom"> <nav aria-label="Footer Navigation" class="footer--navigation"> <ul> <li><a href="/contact-us">Contact Us</a></li> <li><a href="https://www.ucsf.edu/accessibility-resources">Accessibility</a></li> <li><a href="https://www.ucsf.edu/website-privacy-policy">Privacy Policy</a></li> <li><a href="https://websites.ucsf.edu/website-terms-use">Terms of Use </a></li> <li><a href="https://websites.ucsf.edu/azlist">A-Z Website List</a></li> </ul> </nav> <div class="footer--copyright"> <p>© 2025 The Regents of the University of California</p> </div> </div> </div> </div> </div> </div> <script data-cfasync="false" src="/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js"></script><script type="text/javascript"> /*<![CDATA[*/ (function() { var sz = document.createElement('script'); sz.type = 'text/javascript'; sz.async = true; sz.src = '//siteimproveanalytics.com/js/siteanalyze_8343.js'; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(sz, s); })(); /*]]>*/ </script> </body> </html>