C. If any of the HIPAA identifiers will be stored in an off-site database, the database should have limited access
and be encrypted. It should be clearly stated in the HIPAA authorization what will be stored. Social security
numbers should NOT be stored in an off-site database unless required for billing purposes (any other requests
will be handled on a case by case basis). Social security numbers may NOT be stored in a for-profit company's
database.
9. ADDITIONAL INFORMATION
A. Provide the justification for banking biospecimens at a non-VA repository.
B. Upon termination/closing of the bank, what will happen to veterans’ biospecimens?
Biospecimens will be destroyed.
Biospecimens will be returned to the originating VA facility.
Other. Please provide an explanation.
C. If the subject withdraws from a study, what will happen to his/her biospecimens and data?
Biospecimens will be destroyed except for any de-identified samples that have been shared with other
researchers. The research team will continue to use any information that they have already collected
from the subject to ensure the integrity of the research. However, no new information will be collected
from the subject.
Biospecimens and all data linked to that subject will be destroyed.
D. Comments (additional information that would help us review your application)
VA FORM 10-0436
Page 5 of 7
MARCH 2009