HIPAA Home

At the University of Florida, research involving Protected Health Information (PHI) is subject to federal privacy regulations. HIPAA’s Privacy Rule does not override the Common Rule or FDA Human Subjects Research regulations. All federal research regulations still apply.  For Gainesville, IRB-01 functions as the Privacy Board for human subject research conducted at the University of Florida, Shands, and the local Veteran’s Administration.  

Protected Health Information (PHI) is any information in the medical record or designated record set that can be used to identify an individual and that was created, used, or disclosed in the course of providing a health care service such as diagnosis or treatment.

UF Privacy Office states that PHI is individually identifiable health information that is transmitted or

maintained in any form or medium. PHI excludes individually identifiable health information:

        a. In education records covered by the Family Educational Rights and Privacy Act (FERPA);

        b. In employment records held by a covered entity in its role as an employer;

        c. Regarding a person who has been deceased for more than 50 years.