A CDCES is approached by a researcher requesting access to patient data for a diabetes outcomes study. What must be in place before sharing identifiable data?
-
A
Verbal consent from the patients involved
-
B
IRB approval and patient authorization or a valid HIPAA waiver
-
C
Approval from the facility administrator only
-
D
Publication of a data use agreement in a peer-reviewed journal