In the realm of health care, privacy protections are needed to preserve patients' dignity and prevent possible harms. Ten years ago, to address these concerns as well as set guidelines for ethical health research, Congress called for a set of federal standards now known as the HIPAA Privacy Rule.

In the realm of health care, privacy protections are needed to preserve patients' dignity and prevent possible harms. Ten years ago, to address these concerns as well as set guidelines for ethical health research, Congress called for a set of federal standards now known as the HIPAA Privacy Rule.

In its 2009 report, Beyond the HIPAA Privacy Rule: Enhancing Privacy, Improving Health Through Research, the Institute of Medicine's Committee on Health Research and the Privacy of Health Information concludes that the HIPAA Privacy Rule does not protect privacy as well as it should, and that it impedes important health research.

Table of Contents

• Front Matter

• Summary

• Overview of Conclusions and Recommendations

• 1 Introduction

• 2 The Value and Importance of Health Information Privacy

• 3 The Value, Importance, and Oversight of Health Research

• 4 HIPAA, the Privacy Rule, and Its Application to Health Research

• 5 Effect of the HIPAA Privacy Rule on Health Research

• 6 A New Framework for Protecting Privacy in Health Research

• Appendix A: Previous Recommendations to the Department of Health and Human Services

• Appendix B: Commissioned Survey Methodology

• Appendix C: Committee Member and Staff Biographies

• Abbrevations and Acronyms

• Glossary