If a researcher has questions about HIPAA research requirements, who should they consult?

Consulting the organizational Institutional Review Board (IRB) or Privacy Board is the most reliable choice for addressing questions about HIPAA research requirements. These boards are specifically designed to oversee research involving human subjects and ensure compliance with ethical standards and legal regulations, including HIPAA. They have the expertise and authority to provide relevant guidance related to confidentiality, data privacy, and the protection of health information in research contexts.

While mentors, advisors, peer researchers, and online forums can be valuable resources for various types of guidance, they may not have the comprehensive oversight or up-to-date understanding of HIPAA regulations that an IRB or Privacy Board would offer. Their advice might be based on personal experience or general knowledge, which could potentially lead to misunderstandings or misapplications of the law. In matters as critical and complex as HIPAA compliance, it is essential to seek guidance from those with formal authority and expertise, ensuring that all research activities adhere strictly to legal and ethical standards.