In the realm of health care, privacy protections are needed to preserve patients' dignity and prevent possible harms. Ten years ago, to address these concerns as well as set guidelines for ethical health research, Congress called for a set of federal standards now known as the HIPAA Privacy Rule. In its 2009 report, Beyond the HIPAA Privacy Rule: Enhancing Privacy, Improving Health Through Research, the Institute of Medicine's Committee on Health Research and the Privacy of Health Information concludes that the HIPAA Privacy Rule does not protect privacy as well as it should, and that it impedes important health research.Table of ContentsFront MatterSummaryOverview of Conclusions and Recommendations1 Introduction2 The Value and Importance of Health Information Privacy3 The Value, Importance, and Oversight of Health Research4 HIPAA, the Privacy Rule, and Its Application to Health Research5 Effect of the HIPAA Privacy Rule on Health Research6 A New Framework for Protecting Privacy in Health ResearchAppendix A: Previous Recommendations to the Department of Health and Human ServicesAppendix B: Commissioned Survey MethodologyAppendix C: Committee Member and Staff BiographiesAbbrevations and AcronymsGlossary