The purpose of this policy is to define the procedure for determining if a research activity is subject to or exempt from the Privacy Rule. Conduct of Research hipaa_exemption_policy.pdf