Health Insurance Portability & Accountability Act (HIPAA) In the course of conducting research, researchers may create, use, and/or disclose individually identifiable health information. Under the Privacy Rule, covered entities are permitted to use and disclose HIPAA for research with individual authorization or without individual authorization under limited circumstances. Please contact the IRB Office for proper documentation, use and approval in your research.