Do HIPAA regulations apply to data sets with health information?
Yes. Regulations permit covered entities (usually the agency providing the data) to disclosure health information for research purposes without authorization by the research subject if the use or disclosure involves a “limited data set” and the covered entity enters into a data use agreement with the researcher.
