Everybody knows the IRB reviews research. However, that’s not the IRB’s only role in research oversight. The IRB at UAMS also acts as the UAMS Privacy Board for HIPAA-related research issues. A Privacy Board is a review body established to act upon requests for a waiver or an alteration of the HIPAA Authorization requirement under the HIPAA Privacy Rule for uses and disclosures of protected health information (PHI) for a particular research study. So, technically speaking, every time the IRB approves a complete or partial HIPAA waiver, the board is stepping out of its IRB role and putting on its Privacy Board hat. In addition, the Privacy Board also receives and considers reports of possible HIPAA-related problems, such as the use of PHI without an appropriate HIPAA authorization or waiver.
For more information about HIPAA in research, please see UAMS Administrative Guide Policy 3.1.27.