Back to Explorer

IRB Review of Stand-Alone HIPAA Authorizations Under FDA Regulations: Guidance for Industry

FinalOffice of the Commissioner08/16/2003

Description

This guidance provides the current recommendations of the Food and Drug Administration (FDA) concerning Institutional Review Boards’  (IRB) review and approval under 21 C.F.R. Part 56 of stand-alone authorizations that are created by covered entities (or by third parties), pursuant to the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy Rule, and that are provided to research subjects prior to enrolling in clinical investigations after April 14, 2003, to obtain their permission to use and/or disclose their health information for research. A stand-alone HIPAA authorization (for research) is a document that is used to obtain permission from an individual for a covered entity to use and/or disclose the individual’s identifiable health information for a research study, and that is not combined with an informed consent document to participate in the research study itself. The Privacy Rule refers to a HIPAA authorization that has been combined with an informed consent document as a “compound authorization.”  IRBs would be required to review the HIPAA authorization in a “compound authorization”  because IRBs are required, with certain exceptions, to review and approve informed consent documents. See 21 C.F.R. Part 56.

Scope & Applicability

Stakeholders

4
Sponsor

Entity responsible for submitting applications under section 524B

Clinical investigator

Responsible for maintaining the coding key in clinical research

clinical investigators

requiring clinical investigators to disclose the financial interests and arrangements of their same-sex spouses.

covered entities

Health plans, health care clearinghouses, and certain health care providers subject to the Privacy Rule.

Regulatory Context

Attributes

1
Protected health information

Individually identifiable health information protected under the Privacy Rule

Related CFR Sections (2)

Related Warning Letters (10)

  • Clinical Investigator

    Shirish M. Gadgeel, M.D.

    2025-09-09
  • Clinical Investigator

    Mark J. Savant, M.D

    2025-07-15
  • Bioresearch Monitoring Program/Institutional Review Board (IRB)

    United Health Products, Inc.

    2025-05-20
  • Clinical Investigator

    Americo F. Padilla, M.D.

    2025-03-25
  • Institutional Review Board (IRB)

    Armstrong County Memorial Hospital

    2024-11-05
  • Clinical Investigator

    Namita A. Goyal, M.D.

    2024-10-22
  • Institutional Review Board (IRB)

    Louisiana State University Health Science Center IRB

    2024-10-08
  • Bioresearch Monitoring Program/IRB

    Massachusetts Institute of Technology MIT

    2024-07-16
  • Clinical Investigator (Sponsor)

    Angela D. Ritter, M.D.

    2024-06-18
  • Institutional Review Board (IRB)

    New York State Psychiatric Institute IRB

    2024-03-26

See Also (8)