This guidance provides the current recommendations of the Food and Drug Administration (FDA) concerning Institutional Review Boards’ (IRB) review and approval under 2 1 C.F.R. Part 56 of stand-alone authorizations that are created by covered entities (or by third parties), pursuant to the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy Rule, and that are provided to research subjects prior to enrolling in clinical investigations after April 14, 2003, to obtain their permission to use and/or disclose their health information for research. A stand-alone HIPAA authorization (for research) is a document that is used to obtain permission from an individual for a covered entity to use and/or disclose the individual’s identifiable health information for a research study, and that is not combined with an informed consent document to participate in the research study itself. The Privacy Rule refers to a HIPAA authorization that has been combined with an informed consent document as a “compound authorization.” IRBs would be required to review the HIPAA authorization in a “compound authorization” because IRBs are required, with certain exceptions, to review and approve informed consent documents. See 21 C.F.R. Part 56.
Submit comments on this guidance document electronically via docket ID: FDA-2013-S-0610 - Specific Electronic Submissions Intended For FDA's Dockets Management Staff (i.e., Citizen Petitions, Draft Proposed Guidance Documents, Variances, and other administrative record submissions)
If unable to submit comments online, please mail written comments to:
Food and Drug Administration
5630 Fishers Lane, Rm 1061
Rockville, MD 20852
All comments should be identified with the title of the guidance.