To use and/or disclose Protected Health Information (PHI) for research purposes , the HIPAA Privacy Rule in general requires that researchers obtain signed authorization from the individual. An IRB can grant a Waiver of HIPAA Authorization to permit...