This module discusses data protection requirements for human subjects research that creates, obtains, uses, or discloses health data, principally the protections that derive from the Health Insurance Portability and Accountability Act (HIPAA). The following document discusses HIPAA’s additional privacy protections for individually identifiable health data that are used for human subjects research, including authorizations and accountings of disclosures. Explain the responsibilities of researchers and organizations for meeting HIPAA’s privacy requirements and for appropriate data security protections that are necessary to protect privacy.