Evolving state law is undermining the legal foundation governing medical research. Because CCPA neither exempts all federally permissible medical research, nor recognizes HIPAA de-identification, we expect the law to burden research with significant legal complexities and delays. This session will explain current research uses of HIPAA de-identified data, review CCPA de-identification and research provisions, analyze technical and practical differences between HIPAA, CCPA, and FTC-based de-identification standards, and offer legislative language to minimize harm to medical research from CCPA and other new laws.
Ann Waldo, Principal, Waldo Law Offices
Daniel Barth-Jones, Professor, Mailman School of Public Health, Columbia University