OEB does not Use or Disclose PHI for Research purposes that has not been De- identified as required by Section 4.13, without a signed Authorization that identifies the PHI to be disclosed, the specific research for which the Use or Disclosure is authorized, and the Individual who may Use or to whom the PHI may be Disclosed. Any Use or Disclosure of such PHI must be made in accordance with the terms of the Authorization.
Offices that maintain PHI as Business Associates for another Covered Entity may Use or Disclose such PHI only as expressly approved by the Covered Entity under its own Privacy policies.
For purposes of this Policy, Use and Disclosure includes any review conducted preparatory to research.
REFERENCES/CITATIONS
45 C.F.R. §164.508
45 CFR 164.512(i)(1)(ii)
