In the realm of health care, privacy protections are needed to preserve patients' dignity and prevent possible harms. Ten years ago, to address these concerns as well as set guidelines for ethical health research, Congress called for a set of federal standards now known as the HIPAA Privacy Rule.


In its 2009 report, Beyond the HIPAA Privacy Rule: Enhancing Privacy, Improving Health Through Research, the Institute of Medicine's Committee on Health Research and the Privacy of Health Information concludes that the HIPAA Privacy Rule does not protect privacy as well as it should, and that it impedes important health research.


Table of Contents


Front Matter
Summary
Overview of Conclusions and Recommendations
1 Introduction
2 The Value and Importance of Health Information Privacy
3 The Value, Importance, and Oversight of Health Research
4 HIPAA, the Privacy Rule, and Its Application to Health Research
5 Effect of the HIPAA Privacy Rule on Health Research
6 A New Framework for Protecting Privacy in Health Research
Appendix A: Previous Recommendations to the Department of Health
and Human Services
Appendix B: Commissioned Survey Methodology
Appendix C: Committee Member and Staff Biographies
Abbrevations and Acronyms
Glossary