Regulatory

HIPAA

US federal law on medical information privacy and security.

Health Insurance Portability and Accountability Act (1996). Governs protection of PHI (Protected Health Information) and its exchanges. Applies to researchers handling identifiable US data; requires BAAs with processors.