Users must delete their data from RedCap after their data collection is over. RedCap is not a data storage tool.
Standard Account
Most users at USU will require a standard REDCap account for data collection. The standard REDCap account is intended for projects not involving the collection or use of Sorenson Center Protected Health Information (PHI). Click below to request a standard (non-HIPAA) REDCap account.
Get a standard RedCap account
HIPAA-Compliant Account
A HIPAA-compliant account is used for data involving Protected Health Information (PHI) from one or more Sorenson Center HIPAA clinics. Please refer to the clinic names and the 18 HIPAA identifiers below.
HIPAA Identifiers
- Name
- Address (all geographic subdivisions smaller than a state, including street address, city, county, and zip code)
- All elements (except years) of dates related to an individual (including birthdate, admission date, discharge date, date of death, and exact age if over 89)
- Telephone numbers
- Fax numbers
- Email address
- Social Security Number
- Medical record number
- Health plan beneficiary numbe
- Account number
- Certificate or license number
- Vehicle identifiers and serial numbers, including license plate numbers
- Device identifiers and serial numbers
- Web URL
- Internet Protocol (IP) Address
- Finger or voice print
- Photographic image - Photographic images include more than just images of the face.
- Any other characteristic that could uniquely identify the individual
If a communication contains any of these identifiers or parts of the identifier, such as initials, the data must be regarded as “identified.” To be considered “de-identified,” ALL of the 18 HIPAA Identifiers must be removed from the data set. This includes all dates, such as surgery dates, all voice recordings, and all photographic images.
Be aware that the HIPAA Privacy Rule protects individually identifiable health information of deceased individuals for 50 years following the date of death. If the research will involve any identifiers linked to living persons or access death records maintained by the State Registrar, local registrars, or county recorders, the project must receive prior approval.