Access anxiety: HIPAA and historical research

The Health Insurance Portability and Accountability Act of 1996 (HIPAA) establishes new standards for the protection of private health information in the United States. The Privacy Rule, one of the specific regulatory provisions of the act, went into effect 14 April 2003 for covered health care providers, institutions, and businesses. The Privacy Rule directly affected medical archivists and their collections. It has significant implications for historians of health care, as well. The Privacy Rule is the first major regulation that protects the privacy of the deceased in perpetuity. It establishes requirements that researchers must satisfy in order to gain access to "individually identifiable health information" held by HIPAA-protected institutions. While these requirements will burden historians in some cases, the Privacy Rule could open up opportunities for well-prepared historians to work with a more extensive range of twentieth-century documents.