Navigate Up

UPMC/University of Pittsburgh Schools of the Health Sciences
Patients and medical professionals may call 1-800-533-UPMC (8762) for more information.

University of Pittsburgh Schools of the Health Sciences

HIPAA Privacy Rule Slows Scientific Discovery, Adds Cost to Research, Survey Shows

PITTSBURGH, November 13, 2007 Implementation of the health care privacy law widely known as HIPAA, or the U.S. Health Insurance Portability and Accountability Act, has severely eroded the process of scientific research, delaying some clinical studies and curtailing others before they even begin, reports Roberta B. Ness, M.D., M.P.H., in this weeks issue of the Journal of the American Medical Association. The findings are part of the first national survey of epidemiologists commissioned by the Institute of Medicine, National Academies of Science.

HIPAA is adversely affecting our ability to conduct biomedical research, said Dr. Ness, an epidemiologist, associate investigator at the University of Pittsburgh School of Medicine-affiliated Magee-Womens Research Institute and an advisor to the Institute of Medicine committee studying the issue. The privacy rule has made research more costly and time consuming. As a result, some possibly important studies are just not being done.

Epidemiologists analyze the development and control of a wide array of illnesses and their impacts on public health. Survey responses from 1,527 epidemiology practitioners employed in academia, government, industry and other groups, revealed that two-thirds believed that HIPAA had made research a great deal more difficult to accomplish. In addition, a significant proportion of respondents reported more negative consequences for protecting human subjects than positive effects. All respondents are part of the Joint Policy Committee, Societies of Epidemiology, which co-sponsored the study.

We asked questions about both positive and negative potential impacts from the HIPAA privacy rule, including the impact on subject privacy, confidentiality and public trust, as well as on research procedures, Dr. Ness said. Almost 40 percent of respondents indicated that the privacy rule had increased research costs by a large degree, and nearly half said that significant additional time was required under the rule to complete projects.

Established in 2003, HIPAA was designed to enhance patient privacy by restricting access to medical records while preserving the legitimate use of such information for important social goals. In practice, however, academic institutional review boards (IRBs) and other institutional bodies that govern research on human subjects vary widely in their interpretation of the rule, resulting in a mishmash of conflicting procedures across the country, Dr. Ness noted, adding that some IRBs continue business as usual, while others essentially shut research down.

According to our survey, there is a perception that HIPAA may even be having a negative effect on public health surveillance practices, and a lot of it is because of this variability in interpretation, said Dr. Ness, who is president-elect of the American College of Epidemiology. Some public health departments are defining a much broader portfolio of activities as research, and, therefore, are subject to HIPAA, more than other health departments. At this point, were not absolutely sure what that means in terms of public health whether this poses any threat to combating epidemics or other dangers.

While documenting negative HIPAA effects on a nationwide basis has been difficult, single-institution experience indicates widespread problems. Recruitment for one study being conducted at the University of Pittsburgh, for example, declined from more than a dozen people a week prior to HIPAA to an average of five at best after the rule took effect. At the University of Michigan, patient consent for a study declined from more than 96 percent to 34 percent. In another study at the University of Michigan, the implementation of HIPAA resulted in a nearly 73 percent decline in patient recruitment and a threefold increase in research staff time spent recruiting.

At the same time, only a quarter of epidemiologists said they thought HIPAA had achieved its goal of improving the confidentiality of patient information.

Public opinion polls show that over 90 percent of the public thinks its a priority for us to proceed expeditiously in uncovering new causes of and treatments for disease, said Dr. Ness. Without any question, this survey suggests that the HIPAA legislation is impeding the progress of such research. And for those institutions that may have a breakthrough in the offing, its going to add months to years to discovery.

The realization that many biological processes are extremely gender specific led to the establishment of Magee-Womens Research Institute (MWRI), one of the first research centers to focus on health issues specifically related to women and infants. Since its inception in 1992, the Institute has become a well-recognized and respected center for its research, both nationally and internationally, attracting some $185 million in grant funding. For more information about MWRI, visit the Institute Web site at


UPMC | Affiliated with the University of Pittsburgh Schools of the Health Sciences Supplemental content provided by Healthwise, Incorporated. To learn more, visit

For help in finding a doctor or health service that suits your needs, call the UPMC Referral Service at 412-647-UPMC (8762) or 1-800-533-UPMC (8762). Select option 1.

UPMC is an equal opportunity employer. UPMC policy prohibits discrimination or harassment on the basis of race, color, religion, ancestry, national origin, age, sex, genetics, sexual orientation, gender identity, marital status, familial status, disability, veteran status, or any other legally protected group status. Further, UPMC will continue to support and promote equal employment opportunity, human dignity, and racial, ethnic, and cultural diversity. This policy applies to admissions, employment, and access to and treatment in UPMC programs and activities. This commitment is made by UPMC in accordance with federal, state, and/or local laws and regulations.

Medical information made available on is not intended to be used as a substitute for professional medical advice, diagnosis, or treatment. You should not rely entirely on this information for your health care needs. Ask your own doctor or health care provider any specific medical questions that you have. Further, is not a tool to be used in the case of an emergency. If an emergency arises, you should seek appropriate emergency medical services.

Pittsburgh, PA, USA |