Studies that will be accessing or sharing OU Health patient data must submit to CRIOC for review and approval. This is in addition to other processes, including those required by the OUHSC Institutional Review Board (IRB) and Office of Research Administration (ORA). In many instances, researchers are not notified of the requirement for CRIOC review until the end of the ORA process, but it is not necessary to wait for ORA notification to request CRIOC review.
Please be sure to fill out the CRIOC form as thoroughly as possible, especially as related to specific Protected Health Information (PHI) data elements to be shared and methods for transporting data. For more information regarding de-identification and re-identification as well as a detailed list of data elements that are considered PHI, please review OU's HIPAA policies.