Problem: Under HIPAA, "retrospective research" (a.k.a., data mining) on collections of PHI generally ... Need Assignment Help? O Is research, and so requires either an authorization or meeting one of the criteria for a waiver of authorization. O Is covered by Common Rule/FDA requirements, but not HIPAA's. Does not meet the definition of research, and so requires no HIPAA authorization or meeting one of the criteria for waiving authorization. O Must meet HIPAA requirements and if the data collection is in a different jurisdiction (state) than the researcher accessing it.