HIPAA 45 C.F.R. § Minimum For research purposes, a Covered Entity 164.514(d)(3) Necessary may rely on or “documentation Requirements representations that comply with the applicable requirements of [45 CFR] § 164.512(i)” to establish the minimum necessary PHI HIPAA 45 C.F.R. § Limited Data Sets covered entity may use or disclose a “A 164.514(e)(1) limited data set . . . if the covered entity enters into a data use agreement with the limited data set recipient” HIPAA 45 C.F.R. § Limited Data Sets Limited data set excludes most 164.514(e)(2) identifiers, does allow dates, identification codes HIPAA 45 C.F.R. § Permitted Uses Includes research 164.514(e)(3) and Disclosures of Limited Data Sets 45 C.F.R. § Limited Data Set Use or disclosure of limited data sets 164.514(e)(4) Agreements requires limited data set with mandatory provisions
HIPAA 45 C.F.R. § 164.514(d)(3) Minimum Necessary Requirements For research purposes, a Covered Entity may rely on “documentation or representations that comply with the applicable requirements of [45 CFR] § 164.512(i)” to establish the minimum necessary PHI HIPAA 45 C.F.R. § 164.514(e)(1) Limited Data Sets “A covered entity may use or disclose a limited data set . . . if the covered entity enters into a data use agreement with the limited data set recipient” HIPAA 45 C.F.R. § 164.514(e)(2) Limited Data Sets Limited data set excludes most identifiers, does allow dates, identification codes HIPAA 45 C.F.R. § 164.514(e)(3) Permitted Uses and Disclosures of Limited Data Sets Includes research 45 C.F.R. § 164.514(e)(4) Limited Data Set Agreements Use or disclosure of limited data sets requires limited data set with mandatory provisions
CITL-HITECH-HIPAA-Gap-Analysis.docx