HIPAA Research Program Management FY 2003-2004
Denise M. Hynes PhD MPH BSN
Edward Hines, Jr. VA Hospital, Hines
Hines, IL
Funding Period: October 2002 - September 2004

BACKGROUND/RATIONALE:
The goal of the HIPAA Research Program is to support the overall initiative of VHA compliance with the HIPAA mandates by interpreting and disseminating these mandates to the research community within VHA.

OBJECTIVE(S):
1.Develop a report for submission to VACO on the research implications of use of identifiable data under the new HIPAA requirements as well as the existing regulations applicable to VA research.

2 Develop a national dissemination and training program aimed at communicating key compliance issues relating to privacy, confidentiality and data security with regard to research use of individually identifiable and other data

3.Understand, review and develop educational and training materials for researchers in understanding the research implications and compliance issues with regard to privacy, confidentiality and data security

4.Develop a handbook for HSR&D Service describing the guidelines for use of data regarding protection of data security, privacy and confidentiality.

5.Conduct policy analysis aimed at analyzing potential impacts of new legislation or regulation with regard to research use of individually identifiable and other data.

6.Provide customer service support regarding compliance and other issues that are mandated by the new HIPAA legislation with regard to research use of individually identifiable and other data.

7.Support research and other projects in VIReC with regard to compliance with data privacy regulations.

METHODS:
Review and analysis of promulgated regulatory rules regarding HIPAA and other data and security issues.

FINDINGS/RESULTS:
The nature of this project changed dramatically in December of 2002. In anticipation of the final compliance date for the HIPAA Privacy Rule, the primary staff person on the project was detailed to VHA Office of Research and Development (ORD) for a significant period of time to direct the implementation of the Privacy Rule throughout VHA’s research program. Much of the work proposed to be done under this project was done under the auspices of ORD. Staff in ORD has continued to develop, in consultation with VIReC’s staff, handbooks and guidance for the research field. VIReC continues to be a resource on privacy and HIPAA for the research field as well as for a variety of offices within VHA.

IMPACT:
The project has laid a groundwork for the continuing development of VHA policy on privacy and research. VIReC’s continuing role as a resource for the research program within VHA is of enormous benefit and impact to the field.

PUBLICATIONS:
None at this time.

DRA: Health Services and Systems
DRE: none
Keywords: Policy - VA or other
MeSH Terms: none