lKnow the rules and be prepared for varying interpretations by covered entities
lAuthorization vs. waiver
lPreparing a confidentiality plan
–What information is required?
–Who will have access to the data?
–How long will access be needed?
–Safeguards for protecting information
lAlternatives to use of PHI?
lTime to gain approval from an additional committee
l