Which form is used to authorize sharing protected health information under HIPAA in research?

• A. HIPAA authorization form
• B. Informed consent form
• C. Conflict of interest disclosure
• D. Recruitment material

Answer: (A)

Authorization to use and disclose protected health information for a research study is granted through a HIPAA authorization form. This form specifies exactly what PHI may be shared, who may receive it, the purpose of the disclosure, the expiration date, and the right to revoke authorization. It’s the mechanism that gives patients control over whether their PHI can be used in the study. Informed consent, by contrast, is about agreeing to participate in the research and understanding risks and procedures—not about authorizing PHI sharing. Recruitment materials and conflict of interest disclosures don’t authorize PHI disclosures. So the HIPAA authorization form is the proper instrument to permit sharing PHI under HIPAA in research.