A covered entity may use or disclose PHI without an authorization, or documentation of a waiver or an alteration of authorization, for all of the following EXCEPT:

• Use of decedents’ information, with certain representations by the researcher.
• Data that does not cross state lines when disclosed by the covered entity.
• Activities preparatory to research, with certain representations by the researcher.
• Limited data set with an approved data use agreement.

CLICK HERE TO DOWNLOAD FULL EXAM ANSWERS SHEET (PDF FORMAT)

 To see all the questions and correct answers of the IRB Law Questions Certification Exam, Click Here –
IRB Law Questions with Certification Exam Answers