Research in the age of privacy
To accommodate the needs of biomedical research, the recommendations state that "providers and payers and those receiving information under the provisions of the legislation without patient authorization" should be permitted to disclose health information without patient authorization for research under the following conditions:
- The research would be impracticable to conduct without the individually identifiable health information.
- The research has been approved by an institutional review board (IRB).
- The IRB has determined that the importance of the research outweighs the intrusion into the patient's privacy; the research is