. . . "Research protocols, which include the gathering of health or mental health information and are submitted in accordance with HIPAA???s privacy standards, restrictions and other requirements, must develop and submit a HIPAA Authorization form that contains core elements in the HIPAA Privacy Rule: description of the information to be used or disclosed; identification of the persons or class of person" .