The Privacy Rule, or Standards for the Privacy of Individually Identifiable Health Information, issued by the U.S. Department of Health and Human Services implements the Health Insurance Portability and Accountability Act of 1996. It establishes a set of national standards for the protection of certain health information.
The standards address the use and disclosure of individuals’ health information – called protected health information – by organizations subject to the Privacy Rule (referred to as “covered entities”) for various purposes, including research. It also sets standards for individuals’ privacy rights to gain access to, be informed of, and control how their health information is used.
The Privacy Rule applies to health plans, health care clearinghouses, and any health care provider that electronically transmits health information in connection with certain transactions, which include claims, benefit eligibility inquiries, referral authorization requests, or other transactions for which DHHS has established standards under the HIPAA Transactions Rule.
It is important to note that many research organizations that handle individually identifiable health information do not have to comply with the Privacy Rule because they are not considered covered entities. The Privacy Rule will not directly regulate researchers who are engaged in research within such organizations, even though they may gather, generate, access, and share personal health information. For instance, entities that sponsor health research or create and/or maintain health information databases may not themselves be covered entities, and thus may not directly be subject to the Privacy Rule. However, researchers may rely on covered entities for research support or as sources of individually identifiable health information to be included in research repositories or research databases. The Privacy Rule may affect such independent researchers, as it will affect their relationships with covered entities.
As of August 31, 2016, NSHE, a hybrid covered entity, designates its health care components as follows:
UNLV
- University of Nevada, Las Vegas School of Medicine, as a hybrid covered entity, and as an Organized Health Care Arrangement with its affiliated practice clinics;
- University of Nevada, Las Vegas Ackerman Center for Autism and Neurodevelopment Solutions;
- Dental School and any associated clinics;
- The Student Wellness unit which includes: Student Health Center, Pharmacy and Laboratory, Counseling and Psychological Services (CAPS); and Faculty and Staff Treatment Center (FAST);
- Athletic Training Department;
- Center for Individual and Family Counseling;
- Center for Health Information Analysis;
- National Supercomputing Center for Energy and the Environment;
- The PRACTICE (a community mental health training clinic);
- Marriage and Family Therapy clinic;
- Nevada Institute of Personalized Medicine.
Additional information can be found in the Nevada System of Higher Education Procedures and Guidelines Manual
Extensive information about HIPPA is available from the U.S. Department of Health and Human Services. The American Psychological Association also maintains a list of useful FAQs.