https://privacyruleandresearch.nih.gov/pr_08.asp
https://www.hhs.gov/hipaa/for-professionals/privacy/index.ht...