Sensitive identifiable human subject research data is regulated by the Federal Policy for the Protection of Human Subjects (also called the “Common Rule”). Among other requirements, the Common Rule mandates that researchers protect the privacy of subjects and maintain the confidentiality of human subject data. Human subjects research data may also fall under the regulatory requirements of the U.S. Food and Drug Administration (FDA).
A human subject is defined in the Common Rule as a "living individual about whom an investigator (whether professional or student) conducting research obtains (1) data through intervention or interaction with the individual, or (2) identifiable private information.”
“Identifiable” means the information contains one or more data elements that can be combined with other reasonably available information to identify an individual (for example, Social Security number, healthcare record).
Personally-identifiable data is sensitive if disclosure of such data would pose increased social/reputational, legal, employability, or insurability risk to subjects.
Sensitive identifiable human subject data may, but doesn’t necessarily, contain Protected Health Information subject to the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”). To determine if the data you are working with is subject to HIPAA please visit http://dataguide.uchicago.edu/protected-health-information. Clinical trials subject to FDA regulations are likely to produce Protected Health Information as well as sensitive identifiable human subject research data.
Sensitive
Laws