IRB Application for Medical Records Review Request



Similar documents
HIPAA-Compliant Research Access to PHI

HIPAA COMPLIANCE. What is HIPAA?

Health Insurance Portability & Accountability Act (HIPAA) Compliance Application

HIPAA COMPLIANCE INFORMATION. HIPAA Policy

Winthrop-University Hospital

What is Covered under the Privacy Rule? Protected Health Information (PHI)

UPMC POLICY AND PROCEDURE MANUAL

What is Covered by HIPAA at VCU?

HIPAA Medical Billing Requirements For Research

HIPAA POLICY REGARDING DE-IDENTIFICATION OF PROTECTED HEALTH INFORMATION AND USE OF LIMITED DATA SETS

HIPAA-P06 Use and Disclosure of De-identified Data and Limited Data Sets

IDAHO STATE UNIVERSITY POLICIES AND PROCEDURES (ISUPP) HIPAA Privacy - De-identification of PHI 10030

Administrative Services

HIPAA OVERVIEW ETSU 1

SCHOOL OF PUBLIC HEALTH. HIPAA Privacy Training

University of Mississippi Medical Center Office of Integrity and Compliance

Memorandum. Factual Background

De-Identification of Health Data under HIPAA: Regulations and Recent Guidance" " "

Statement of Policy. Reason for Policy

HIPAA-G04 Limited Data Set and Data Use Agreement Guidance

4. No accounting of disclosures is required with respect to disclosures of PHI within a Limited Data Set.

De-Identification of Clinical Data

Instructions for Form: Application for Claim of Exemption

How to De-identify Data. Xulei Shirley Liu Department of Biostatistics Vanderbilt University 03/07/2008

Children's Hospital, Boston (Draft Edition)

Health Insurance Portability and Accountability Policy 1.8.4

North Shore LIJ Health System, Inc. Facility Name

University of Cincinnati Limited HIPAA Glossary

UPMC POLICY AND PROCEDURE MANUAL

Protecting Personal Health Information in Research: Understanding the HIPAA Privacy Rule

Section C: Data Use Agreement. Illinois Department of Healthcare and Family Services. And DATA USE AGREEMENT

HIPAA PRIVACY POLICY FOR OPTICAL LABS TABLE OF CONTENTS. Exhibit B Notice of Privacy Practices pages B-1 to B-4

Limited Data Set Background Information

Grand Rapids Medical Education Partners Mercy Health Saint Mary s Spectrum Health. Pam Jager, GRMEP Director of Education & Development

BUMC Clinical Research Seminar: What would YOU do? Put your IRB hat on!

Extracting value from HIPAA Data James Yaple Jackson-Hannah LLC

Virginia Commonwealth University Information Security Standard

PROTECTED HEALTH INFORMATION AND THE JHSPH

Legal Insight. Big Data Analytics Under HIPAA. Kevin Coy and Neil W. Hoffman, Ph.D. Applicability of HIPAA

A. HIPAA Privacy Authorizations and Exceptions for Use of Identifiable Protected Health Information

HIPAA Privacy and Security Rules: A Refresher. Marilyn Freeman, RHIA California Area HIPAA Coordinator California Area HIM Consultant

De-Identification of Clinical Data

IRB Month Investigator Meeting April 2014

INDIANA UNIVERSITY SCHOOL OF OPTOMETRY HIPAA COMPLIANCE PLAN TABLE OF CONTENTS. I. Introduction 2. II. Definitions 3

Computer Security Incident Response Plan. Date of Approval: 23- FEB- 2015

HIPAA Privacy Compliance Plan for Research. University of South Alabama IRB Guidance and Procedures

Claim of Exemption Form Page 1 of 6

The De-identification of Personally Identifiable Information

8/3/2015. Integrating Behavioral Health and HIV Into Electronic Health Records Communities of Practice

January Employers must be prepared for their obligations under the HIPAA Privacy Rules

HIPAA and Research Ethics

HIPAA Data Use Agreement Policy R&G Template Updated for Omnibus Rule HIPAA DATE USE AGREEMENT 1

HIPAA and You The Basics

De-identification Koans. ICTR Data Managers Darren Lacey January 15, 2013

[Insert Name and Address of Data Recipient] Data Use Agreement. Dear :

HIPAA PRIVACY AND SECURITY STANDARDS CITY COMPLIANCE

HIPAA means the Health Insurance Portability and Accountability Act of 1996, Public Law

Institutional Review Board

VENDOR / CONTRACTOR. Privacy Basics

LA BioMed Secure

BUSINESS ASSOCIATE AGREEMENT HIPAA Protected Health Information

HIPAA Privacy Board Overview

Burn Model Systems National Data and Statistical Center STANDARD OPERATING PROCEDURE 601. Data Use Agreement

UCSF and Data Contributor are hereinafter also referred to individually as Party and collectively as Parties.

The HIPAA privacy rule and long-term care : a quick guide for researchers

HIPAA POLICY PROCEDURE GUIDE

Everett School Employee Benefit Trust. Reportable Breach Notification Policy HIPAA HITECH Rules and Washington State Law

Revision(s) to an Approved Study Form

CREATIVE SOLUTIONS IN HEALTHCARE, INC. Privacy Policy

How To Protect Your Health Information Under Hiopaa

Business Associate Agreement

RESEARCH INVOLVING DATA AND/OR BIOLOGICAL SPECIMENS

Miami University: Human Subjects Research General Research Application Guidance

University of Hawai i Human Studies Program. Guidelines for Developing a Clinical Research Protocol

HIPAA 101: Privacy and Security Basics

Tips for Investigators ~eirb Submissions~ Department of Emergency Medicine Research Division. *Edwin D. Boudreaux, PhD; EM Division Director

HIPAA ephi Security Guidance for Researchers

Standard Operating Procedures for Research Involving Human Subjects

CancerLinQ Data Quality Management Policies

Human Subjects Research (HSR) Series

Accessing Electronic Health Record Data for Human Subjects Research: Challenges and Solutions August 2, 2012

Data Security & eirb Tips & Tricks School of Nursing Office of Research Affairs Brown Bag Series

Application for an Off-Site Tissue Banking Waiver at a Non-Profit or Academic Institution

Information Security and Privacy. WHAT is to be done? HOW is it to be done? WHY is it done?

Submission Date: Project Start Date: Approximate Project End Date:

HIPAA Basics for Clinical Research

DATA USE AGREEMENT RECITALS

Compliance Program and HIPAA Training For First Tier, Downstream and Related Entities

Gaston County HIPAA Manual

Data Security Considerations for Research

TriageLogic Information Security Policy

Principal Investigator Responsibilities for Education and Social/Behavioral Researchers

INSTITUTIONAL REVIEW BOARD (IRB) REVIEW FORM FOR PROJECTS USING HUMAN SUBJECTS

HEALTH INSURANCE PORTABILITY AND ACCOUNTABILITY ACT (HIPAA): FACT SHEET FOR NEUROPSYCHOLOGISTS Division 40, American Psychological Association

Social Media, Research, and Ethics: Challenges and Strategies

RE: Human Research Subject Protections Under Multiple Project Assurance (MPA) M- 1073

HIPAA AND MEDICAID COMPLIANCE POLICIES AND PROCEDURES

Presented by Jack Kolk President ACR 2 Solutions, Inc.

UC DAVIS OFFICE OF RESEARCH AAHRPP Preparation UC Davis Human Research Part IV Criteria for Review. Cindy Gates IRB Administration

Transcription:

Office of Regulatory Research Compliance Institutional Review Board FORM B1 : Medial Records Review Application FORM B1 IRB Application for Medical Records Review Request Principal Investigator: Email: Date: Phone: Title of Project:

(Please, complete by typing on to the form) Investigator Certification for Reviews Preparatory to Research INVESTIGATOR S REPRESENTATION REVIEW OF PATIENT INFORMATION FOR RESEARCH PREPARATION PURPOSES To Custodian of Patient Information: Federal privacy standards issued by the Department of Health and Human Services pursuant to the Health Insurance Portability and Accountability Act of 1996 ( HIPAA ), permits Howard University to make patient information available for review by an investigator for protocol development and research recruitment purposes, provided that the following representations are obtained from the investigator (45 C.F.R. 164.512 (i)(1)(ii)). 1. Purpose(s) for which access to patient records maintained by Howard University is sought (check all that apply): Research/Data Analysis Protocol Development and/or Identification of Potential Research Participants 2. Category of Review. Check one of the following: Retrospective Chart Review- data is already in existence when the project is submitted to the IRB for initial review EXEMPT REVIEW Prospective Chart Review- data is not in existence when the project is submitted to the IRB for initial review EXPEDITED REVIEW BOTH Retrospective/Prospective Chart Review EXEDITED REVIEW Definitions: Exempt Review: Study procedures involving de-identified data or health information (usually one-time chart collection.) Expedited Review: Study procedures involving identifiable data or health information (usually done for longer-term studies that involve tracking or follow-stages.) Page 1 of 8

3. Background. Describe (briefly) pertinent background information leading to the present proposal. 4. Purpose. Describe the purpose or objectives, and expected benefits of the study. 5. Patient Information. Describe the nature and scope of the patient information to which access is sought: i.e., inclusion/exclusion criteria and age range. Provide the date range of the chart review (if this is a retrospective chart review, the end date must come before the IRB submission date): (e.g. records from 1/1/ 2010 to 12/ 31/ 2012). 6. Source of Medical Information. Check all that apply: Complete Medical Record Laboratory Results Pathology Records/Reports Page 2 of 8

Radiology Records Other (describe): 7. Summary of Activities. Specify the dates over which the investigators will complete the review of the charts: BEGINNING: / / ENDING: / / 8. Statistical Considerations. Please provide the proposed Sample Size: Proposed Sample Size: Confidentiality A. Sensitive Information. Will identifiable, private, or sensitive information be obtained about the participants or other living individuals? Explain how the anonymity of the patients and the confidentiality of their records will be protected and maintained. Include any measures that will be taken to strip identifiers from files used for data analysis, and specify where the records will be maintained and secured. If any personal identifiers will be recorded or linked by a code (or master list) to the research data, please list all of these identifiers and clarify how long you will keep the link/record: B. Participant Identifiers What data items will be collected/recorded for research purposes? Check all that apply: Accessed Recorded Recommends that you only record what is needed for your research Names Geographic subdivisions smaller than state (e.g., street address, city, five digit zip code, county) Months or specific dates (e.g., birth date, admission date, Page 3 of 8

OR HU IRB: Application for Medical Records Review Request (B-1) month of discharge, date of death) References to age 90 or older or references to dates or years indicative of age 90 or older Telephone numbers Fax numbers Email addresses Social Security numbers Medical record or prescription numbers Health plan beneficiary numbers Account numbers Medical device identifiers or serial numbers Biometric identifiers (e.g., finger or voice prints) Full face photographic images or comparable images Web Universal Resource Locations (URLs) Internet Protocol (IP) address numbers Certificate or license numbers (e.g., driver s license numbers) Vehicle identifiers or serial numbers (e.g., license plate numbers, VINs) Linkage codes (to permit re-identification or longitudinal tracking) derived from or related to any of the above Other (describe): If you will not record identifiers: Please initial below to confirm that you will not record any of the identifiers listed above, and complete Supplemental Form G Initial: C. Risks. The use or disclosure of PHI must not involve more than minimal risk to the privacy of individuals. What are the potential risks (including breach of confidentiality) and/or benefits to subjects or society? Minimal (Minimal risk is defined as the probability and magnitude of harm or discomfort anticipated in the research is not greater in and of themselves than ordinarily encountered in daily life or during the performance of routine physical or psychological examinations/tests.) or More than Minimal Page 4 of 8

Indicate what you consider to be the risks to participants and indicate the precautions to be taken to minimize or eliminate these risks. If any data monitoring procedures are needed to ensure the safety of participants, describe them. D. Benefits. Please note that the subjects whose charts are reviewed are not likely to receive any benefit from the proposed research; however, society and investigators will benefit from the knowledge gained. E. Vulnerable Populations: Indicate whether this project involves any of the following populations? Children (Children are defined by local law as anyone under the age of 18.) [If so, please complete Supplemental Form J ] Prisoners [If so, please complete Supplemental Form I ] Pregnant women/neonates/fetuses [If so, please complete Supplemental Form H ] Cognitively impaired or mentally disabled participants Economically or educationally disadvantaged participants Page 5 of 8

Note: a.) If you indicated the inclusion of any of the above populations: In the space below please describe additional safeguards for protection from coercion or undue influence to participate. You must also complete the relevant supplemental forms. b.) For research involving prisoners and some children, waiver of an informed consent is disallowed: http://answers.hhs.gov/ohrp/categories/1568 Please direct your remaining questions to the IRB. Description of the vulnerable population to be included in your research:click here to enter text. F. Consent. Describe the type of consent to be obtained and justification for the choice [written, waiver, or verbal]. Note: For chart reviews, if you plan to collect/record identifiers, you are conduction human subject research, and therefore, must obtain consent or request and justify waiver of consent. For retrospective chart review, if you are not recording identifiers, then consent is not needed. To request waiver of informed consent, please complete Supplemental Form E. For more information click on the link below: http://www.hhs.gov/ohrp/policy/checklists/decisioncharts.html#c1 (Charts 1, 2 and 5) Describe type of consent to be obtained: G. Identify all investigators who will have access to the charts and/or data files under your authority. Please include their email addresses: Name(s)/Role Email Address Page 6 of 8

H. The Principal Investigator represents that: (a) (b) (c) (d) Access to the requested patient information is sought solely for the purpose(s) indicated above; The requested patient information is necessary for the purpose(s) indicated above; and, No individually identifiable patient information will be copied by the investigator(s) or removed from Howard University s premises during [the course of] or following the review. PI agrees to follow HUH procedures for protecting patient data as required by the HUH Compliance Office. I agree to comply with all laws and regulations of the District of Columbia, the U.S. Department of Health and Human Services, the Office for Human Research Protections, the Food and Drug Administration, and the policies and procedures of Howard University/Howard University Hospital in the conduct of this research. I certify that all research personnel have been adequately trained to carry out their responsibilities, and will do so under my supervision. Printed Name of Principal Investigator Title and School/Department Signature of Principal Investigator Date Page 7 of 8

Applications/Protocols can be submitted online at http://www.howard.edu/orrc Should you have any questions, you may email: theorrc@howard.edu or call the ORRC at (202) 865-8597. B1-Checklist Original B-1 Form HUH HIPAA Certifications for all researchers CITI Certifications for all researchers CV/Bio for all researchers Supplemental Form E- Waiver of Informed Consent Supplemental Form G- HIPAA De-Identification Certification, if applicable. rev 8/27/2014 Page 8 of 8