Implementing Honest Broker System(s) in Academic Medical Centers: The Pittsburgh Experience

Similar documents
RESEARCH INVOLVING DATA AND/OR BIOLOGICAL SPECIMENS

Secondary Use of Healthcare Data for Public Health. Leslie Lenert, MD, MS FACMI Director, National Center for Public Health Informatics

UPMC POLICY AND PROCEDURE MANUAL

IRB Application for Medical Records Review Request

IRB REVIEW OF USE OF RESEARCH REPOSITORIES

A Commercial Approach to De-Identification Dan Wasserstrom, Founder and Chairman De-ID Data Corp, LLC

IRB RESEARCH REPOSITORY COMPLIANCE PROGRAM. Susan Burner Bankowski, MS, JD Chair, OHSU IRB

Winthrop-University Hospital

I. INTRODUCTION DEFINITIONS AND GENERAL PRINCIPLE

The Use of Patient Records (EHR) for Research

Health Insurance Portability & Accountability Act (HIPAA) Compliance Application

HIPAA Basics for Clinical Research

IBCSG Tissue Bank Policy

Use of Electronic Health Records in Clinical Research: Core Research Data Element Exchange Detailed Use Case April 23 rd, 2009

Strategies for De-Identification and Anonymization of Electronic Health Record Data for Use in Multicenter Research Studies

INDIANA UNIVERSITY SCHOOL OF OPTOMETRY HIPAA COMPLIANCE PLAN TABLE OF CONTENTS. I. Introduction 2. II. Definitions 3

Anonymizing Unstructured Data to Enable Healthcare Analytics Chris Wright, Vice President Marketing, Privacy Analytics

Application for an Off-Site Tissue Banking Waiver at a Non-Profit or Academic Institution

What is Covered by HIPAA at VCU?

The Ethics of Research with Stored Samples and Data

HIPAA and Clinical Research

UPMC POLICY AND PROCEDURE MANUAL

Memorandum. Factual Background

Biobanks: DNA and Research

NIH s Genomic Data Sharing Policy

Principal Investigator Responsibilities for Education and Social/Behavioral Researchers

Protecting Personal Health Information in Research: Understanding the HIPAA Privacy Rule

HIPAA-Compliant Research Access to PHI

Yale University Open Data Access (YODA) Project Procedures to Guide External Investigator Access to Clinical Trial Data Last Updated August 2015

Office of Clinical Research (OCR)

Clinical Research Management Training Program Electronic Medical Records: Access, Use and Compliance for Research March 11, 2013

HIPAA-P06 Use and Disclosure of De-identified Data and Limited Data Sets

Guidance on Withdrawal of Subjects from Research: Data Retention and Other Related Issues

Standard Operating Procedures for Research Involving Human Subjects

HIPAA: Open Research Issues Michael L. Blau, Esq. McDermott, Will & Emery

Privacy Policy on the Collection, Use, Disclosure and Retention of Personal Health Information and De-Identified Data, 2010

Department of Veterans Affairs VHA HANDBOOK Washington, DC March 9, 2009 USE OF DATA AND DATA REPOSITORIES IN VHA RESEARCH

Instructions for Form: Application for Claim of Exemption

Degrees of De-identification of Clinical Research Data

1.2: DATA SHARING POLICY. PART OF THE OBI GOVERNANCE POLICY Available at:

Dr. Adam Apfelblat 5140 Highland Road Waterford Phone: (248) Fax: (248)

MANUAL OF UNIVERSITY POLICIES PROCEDURES AND GUIDELINES. Applies to: faculty staff students student employees visitors contractors

Friday, May 2. Clinical Trials: Is Your Staff Competent? Session 10:15 11:45 am Ballroom C

Research and the HIPAA Security Rule Prepared for the Association of American Medical Colleges by Daniel Masys, M.D. Professor and Chairman,

BRISSkit: Biomedical Research Infrastructure Software Service kit. Jonathan Tedds. #brisskit #umfcloud

Policies and Procedures Audit Checklist for HIPAA Privacy, Security, and Breach Notification

HIM 111 Introduction to Health Information Management HIM 135 Medical Terminology

WHEN I WANT TO: I NEED TO SUBMIT: {for CIRB studies, see the specific FAQ}

Societal benefits vs. privacy: what distributed secure multi-party computation enable? Research ehelse April Oslo

What is Covered under the Privacy Rule? Protected Health Information (PHI)

HIPAA Privacy Board Overview

UMDNJ COMPLIANCE PLAN

National Quality Assurance Programme in Radiology Information Governance Policy

BIOBANK QUALITY. Office:

Classifying Adverse Events From Clinical Trials

Human Research Protection Program University of California, San Diego ISSUES ON DNA AND INFORMED CONSENT

Yale Cancer Center Data and Safety Monitoring Committee Charter

This policy applies to research administrators, investigators, research staff, Human Investigation Committee (HIC) members and HIC staff.

Legal and Policy Challenges to Secondary Uses of Information from Electronic Clinical Health Records

STANDARD OPERATING POLICY AND PROCEDURE

Global Alliance for Genomics & Health Data Sharing Lexicon

Independent Validation of the Prognostic Gene Expression Ratio Test in Formalin Fixed, Paraffin Embedded (FFPE) Mesothelioma Tumor Tissue Specimens

CTRNet Standard Operating Procedure Job Descriptions, Roles and Responsibilities

m 4 Biobank Alliance & m 4 Trial Service Center

HIPAA (Health Insurance Portability and Accountability Act) Awareness Training for Volunteers and Interns

Computational Pathology and the Role of Pathology Informatics

IRB Month Investigator Meeting April 2014

communications between us and your financial, legal or other adviser, or your broker or agent;

How to De-identify Data. Xulei Shirley Liu Department of Biostatistics Vanderbilt University 03/07/2008

Population Health Management Program Notice of Privacy Practices from Evolent Health

Ethics and Patient Rights (EPR)

Transcription:

Implementing Honest Broker System(s) in Academic Medical Centers: The Pittsburgh Experience Christopher Ryan, Ph.D., CIP IRB Director Professor of Psychiatry University of Pittsburgh ryancm@upmc.edu

The Researcher s Dilemma: How can I study patient medical information when I m not providing care to them? Whatever I shall see or hear in the course of my dealings with patients I will never divulge, holding such things to be holy secrets Hippocratic Oath Before releasing medical records, HIPAA requires written authorization from the patient, where the authorization specifies how PHI will be used, and who will access it No authorization is needed when information is de-identified

The Clinical Institution s Dilemma: How do we de-identify PHI and share these with outside researchers Hospitals and their affiliated Universities are usually legally separate entities Most large hospital systems have records and specimens stored in multiple places, with paper charts and multiple electronic MR systems May have little incentive to invest in an expensive infrastructure to support research, when their mission is patient care

Honest Broker Someone who speaks to both sides involved in an argument or disagreement and tries to help them agree Cambridge Dictionary Tissue/data bank trustee that acts as a well defined barrier between the clinical environment (in which fully identified, confidential patient information is exchanged routinely as part of medical care) and the general research community (in which all information must be de-identified completely). Dhir, 2008, Cancer 113:1705-1715

Honest Brokers as Trustees Individual(s) serving as HBs are not part of the research team Must be members of the clinical facility workforce (or Business Associate) Only entity that can link research data and clinical identifiers Retains code so that information can be updated over time; superior to anonymization Protects confidentiality of patient data and ensures honest research

UPMC Certified Honest Broker Systems More than 80 Honest Broker Systems at UPMC Set up for department/division/clinic/lab/bank Vary in size and design; may be intrinsic to, or embedded in, a repository IRB protocol Written to cover specific records, databases, samples Supports retrospective and prospective research Requires approval by Pitt IRB and by UPMC Privacy Officer

Establishing a Certified HB System Group or Department or Program identifies need and meets with designated IRB staff Staff examines other alteratives / existing system; discourage establishment of new HB system Reviews need; types of info to be accessed and shared; who will serve as HBs; planned training and oversight; infrastructure / support Application for Certification of Honest Broker Systems/Processes is submitted to IRB first Reviewed and approved by IRB, and then by UPMC Privacy Officer

Key Elements of Application (1) Identify individual responsible for oversight* Name all individuals performing HB services* *Must be part of UPMC workforce Identify medical records systems to be accessed other materials? (specimens; radiographic images) Address how materials will be de-identified to comply with HIPAA (Safe Harbor/Limited Data Sets) How will system ensure that LDS are consistent with data elements described in IRB protocol?

Key Elements (2): Policies & Procedures Assigning linkage codes to de-identified info Managing codes to prevent researcher from accessing identifiers Ensuring IRB approval prior to release of info Documenting each HB transaction Routine monitoring of released data to ensure compliance with HIPAA de-identification rules Maintaining security of identifiable PHI by HB system Certification of Honest Broker Responsibilities

Institutional Oversight Challenges Shared governance Who takes responsibility? HB applications have not been integrated into IRB electronic review system Obtaining timely (annual?) updates of activities Absence of a formal renewal process Lack of resources for efficient institutional monitoring of listed procedures via research compliance audits Limited training provided by IRB of HBs Variability in infrastructure and support

Investigator Use of HB System Investigators contact the honest broker in their department/division and request services Informal call: to establish what materials are available Investigator prepares IRB protocol HB signs study-specific Honest Broker Assurance Form ; uploaded into IRB application Investigator completes whatever application is required by the HB system to access records / specimens 11

Study-Specific Honest Broker Assurance

http://www.tissuebank.pitt.edu/ - Large collection of frozen specimens & paraffin blocks - Includes excess clinical tissue and specimens collected with consent - Can be linked to medical record information by honest brokers, and to other institutional research / clinical repositories - Requests are reviewed by tissue utilization committee

Health Sciences Tissue Bank: HB 15 Activities covered by HSTB IRB Protocol Specimens stored in 4 hospitals, and off-site IRB protocol describes operation of HB 15 Supported by 6 Departments / Divisions Pathology / HSTB Cancer Registry (Registry Information Services) Otolaryngology (Head/neck cancer) Gynecologic Oncology Oncology Informatics (Pathology) Department of BioMedical Informatics Continuity of leadership

HSTB: Honest Broker Request Form

Honest Broker A Identifies T2DM cases PT Name linked to code (HBA-12345) and sent to HB B Honest Broker B Obtains info on Prostate CA Provides T2DM info Linked to code (HBA-12345) Request: Samples/Data from 200 Patients with T2DM and Prostate CA Investigator Provides Prostate CA Linked only by code (HBA-12345)

CARe: Center for Assistance in Research Using erecord Medical Record HB System (HB 98) supported through UPMC and the Pitt CTSI (Regulatory Core)

Challenges with this System Patient IDs are not consistent across different clinical systems, affecting ability to merge data Investigators often start with 1 data source and then find other sources are needed. Requires reidentification of initial set can be cumbersome Investigators often start with 1 set of variables and then desire additional; if data have been subsequently archived, may be difficult to retrieve Most HBs have clinical responsibilities which trump research requests Investigators must pay for report writers & programmers time

Honest Broker Systems Are Everywhere! Medical School, University of Michigan: HBO University of Arkansas for Medical Sciences Translational Research Institute Honest Broker University of Florida: Privacy Office HB System National Jewish Health Research Database and Biobank Children s Hospital of Philadelphia Center for Biomedical Informatics U. Chicago Human Imaging Research Office

Getting Started Dhir et al., A multidisciplinary approach to honest broker services for tissue banks and clinical data, Cancer 2008; 113:1705-15 Boyd et al., The University of Michigan Honest Broker, J Am Med Inform Assoc 2009; 16:784-791 Gupta et al., Evaluation of a deidentification (De- ID) software engine to share pathology reports and clinical documents for research, Am J Clin Pathol 2004; 121:176-186 Meystre et al., Automatic de-identification of textual documents in the electronic health record: A review, BMC Med Res Methodol, 2010; 10:70

Questions?