In Reply: Dr Tilden has further developed our concern that there are unnecessary bureaucratic obstacles to reviewing and conducting research. The federal Common Rule is designed to find a balance between legitimate concerns about privacy and the importance of reducing the regulatory burdens on medical record research. This is manifested by the creation of an exemption from coverage by the Common Rule for medical record research in which there will be no development for research purposes of additional records containing personal identifiers (§46.101). For some other categories of medical record research, the Common Rule permits expedited review procedures, waivers, and alterations of the requirement for informed consent (§46.116) and waiver of the requirement for a consent form (§46.117). However, contemporary application of HIPAA requirements take back much of the relief from bureaucratic encumbrances intended by the regulations.
Levine RJ, Fost N. Health Research and the HIPAA Privacy Rule—Reply. JAMA. 2008;299(11):1259-1260. doi:10.1001/jama.299.11.1260-b