Establishing secure connection…Loading editor…Preparing document…

Healthcare Research Addendum

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

HEALTHCARE RESEARCH ADDENDUM

Patient Name:     Medical Record No.:

Study Title:

Principal Investigator:     Institution:

Purpose

This Addendum documents the patient's permission to permit the use of health information, biological specimens, and related materials for research purposes in connection with the study identified above. This Addendum supplements any clinical consent and does not replace a clinical consent or treatment agreement.

Authorization — Scope of Use

By selecting the items below, the patient authorizes the research team and its designees to access, collect, use, and disclose the specified information and materials for the purposes of the research study. Authorization is effective as to each selected item only.

Medical records, clinic notes, hospital records, laboratory results, imaging reports

De-identified health data derived from medical records

Leftover biological specimens (blood, tissue, urine) for analysis and storage

Genetic and genomic testing and derived data

Photographs, drawings, audio recordings, and video recordings

Linkage of research data to external databases and registries

Use in future research studies related to the same or similar conditions

Re-contact for additional studies, inquiries, or clarification

Duration and Revocation

This authorization is effective on the date signed and will remain in effect until the expiration date indicated below or until revoked in writing by the patient. Revocation will not affect uses or disclosures already made in reliance on this authorization prior to receipt of the revocation.

Risks, Benefits, and Alternatives

There may be no direct benefit to the patient from participation. Risks include potential loss of privacy, psychological discomfort, or risks associated with additional procedures. The research team will take reasonable steps to protect confidentiality. Participation is voluntary and refusal or withdrawal will not affect clinical care, payment, enrollment in a health plan, or eligibility for benefits.

Confidentiality and Privacy

Reasonable safeguards will be used to protect identifiable information. Identifiable information may be shared with the research team, collaborators, and regulatory bodies as required. Information that identifies the patient may be removed and de-identified; such de-identified information may be used or disclosed for future research without further authorization.

I authorize the use and disclosure of my protected health information as described above: Yes

Costs and Compensation

There will be no additional cost to the patient for authorizing use of existing clinical data or leftover specimens unless otherwise stated. The patient will be informed of any cost or payment related to research procedures performed solely for research purposes.

Commercial Use and Intellectual Property

The patient understands that discoveries or products developed from research may have commercial value. The patient will not be entitled to compensation for commercial development of discoveries derived from de-identified information or specimens.

No Effect on Clinical Care

Declining to sign this Addendum will not affect the patient's right to receive treatment or the quality of clinical care. Clinical decisions will be made independently of this authorization.

Patient Information (for records)

Insurance Information

Medical History (brief)

Withdrawal and Contact

To revoke this authorization or to obtain further information, contact the research team identified below. Revocation must be submitted in writing.

Authorization Statement

I have read and understand the information in this Addendum. By signing below I authorize the uses and disclosures described herein and acknowledge that I may revoke this authorization in writing at any time, except to the extent that action has already been taken in reliance on it.

Patient Name:

Signature:

Date:

Enter text✕

What the Healthcare Research Addendum Is

A Healthcare Research Addendum is a contractual attachment to an existing agreement that governs the use, disclosure, and protection of health-related data for research purposes. It sets parameters for permitted research activities, data elements to be shared (including protected health information), data de-identification or limited dataset requirements, acceptable security controls, and responsibilities for regulatory compliance such as HIPAA. The addendum also typically addresses institutional review board (IRB) approvals, business associate agreements where applicable, data retention and destruction, and roles for data stewardship and access auditing.

Why a Research Addendum Matters for Healthcare Data

A Healthcare Research Addendum clarifies legal responsibilities, documents agreed safeguards for protected health information, and reduces regulatory risk when sharing data for research. It provides a formal record of consent, data handling expectations, and technical controls tied to HIPAA obligations.

Why a Research Addendum Matters for Healthcare Data

Who Typically Prepares and Signs This Addendum

Parties commonly involved include health system legal or compliance teams, university researchers, data providers, and business associates coordinating research activities.

  • Health systems and hospitals managing clinical data and patient records for secondary research.
  • Academic researchers and university legal offices requesting access to datasets or biorepositories.
  • Vendors and analytics firms processing data under a Business Associate Agreement.

Understanding each party's role up front reduces revision cycles and supports faster IRB and legal review.

Core Elements to Expect in a Healthcare Research Addendum

A complete addendum addresses data scope, permitted uses, safeguards, oversight, data transfer mechanics, and termination procedures to ensure lawful and auditable research use.

Data Scope

Define which data elements are included (identified PHI, limited dataset, or de-identified data), any derived data, and exclusions to prevent ambiguity.

Permitted Uses

Specify allowed research purposes, secondary use restrictions, publication rights, and whether commercial reuse is permitted or prohibited.

Security Controls

List required technical and administrative safeguards such as encryption, access controls, logging, and breach notification procedures.

Regulatory Oversight

Require IRB approval or exemption documentation, specify compliance with HIPAA and other applicable laws, and name responsible compliance officers.

Data Transfer

Describe transfer methods, permitted export locations, secure transport protocols, and any cross-border restrictions.

Termination

Include data disposition instructions, timelines for data deletion or return, and verification obligations after termination.

Step-by-Step: Completing the Healthcare Research Addendum

Follow a clear sequence to speed review and avoid rework: gather approvals, complete fields, secure signatures, and implement controls prior to data transfer.

  • 01
    Gather Approvals: Obtain IRB documentation and internal compliance sign-off before drafting the addendum.
  • 02
    Populate Fields: Complete all mandated fields using institutional names and dates in the required formats.
  • 03
    Confirm Safeguards: Validate technical controls and BAA status with the receiving party.
  • 04
    Execute and Archive: Sign, date, and retain the executed addendum according to retention rules.

How to Configure an Online Workflow for This Addendum

Set up a predictable digital workflow: assign roles, require attestations, attach IRB evidence, and automate secure delivery to signers.

Field Configuration
Signer Role Mapping Define signer roles (PI, institutional rep, data custodian) and required order.
Required Attachments Make IRB approval and protocol PDFs mandatory uploads before final signature.
Authentication Strength Use multi-factor or organization SSO for institutional signers to ensure attribution.
Audit Trail Enable detailed logs (IP, timestamp) and retain digitally for compliance.

Where to Send or File the Executed Addendum

Determine primary repositories and routing logic in advance to keep records consistent across research teams and compliance systems.

  • Institutional Contracts: Submit the executed addendum to the health system contracts office for central filing.
  • IRB Office: Provide a copy to the IRB along with the project record for auditing.
  • Data Steward: Deliver signed instructions to the data custodian to enable controlled access.
  • Secure Archive: Store final executed PDFs in a secure records system with restricted access.

Technical and Platform Considerations for Digital Execution

Verify that your e-signature and file-sharing platform meet HIPAA and institutional requirements before use.

  • Authentication: Use SSO or multi-factor for institutional signers.
  • Encryption: TLS 1.2/1.3 in transit and AES-256 at rest are recommended.
  • Audit Trail: Capture timestamps, IP addresses, and signer actions for compliance.

Required Security and Compliance Details

HIPAA: BAA required
Encryption: TLS/AES
Audit Trail: Detailed logs
Access Control: Role-based
Breach Notice: Timely reporting
IRB Proof: Approval required

Consequences of Incomplete or Improper Addenda

HIPAA Violations: Civil and criminal penalties
Data Breach Costs: Notification and remediation
Contractual Breach: Indemnities and damages
Research Delay: IRB holds or suspension
Loss of Funding: Grant withdrawal
Reputational Harm: Public trust erosion

Common Timelines and Deadlines to Track

Track critical dates such as effective date, IRB approval expiration, data access windows, and periodic review milestones to remain compliant.

Effective Date:

Date obligations begin; enter as MM/DD/YYYY.

IRB Expiration:

Date the IRB approval lapses; renew before this date.

Data Access Window:

Start and end dates for permitted data use.

Annual Review:

Date for compliance and security reassessment.

Termination Actions:

Timeline for data return or destruction after termination.

eSignature Vendor Comparison for Healthcare Research Addenda

Compare core pricing and compliance characteristics for common eSignature providers; signNow is listed first in keeping with platform comparison norms.

signNow DocuSign Adobe Sign PandaDoc HelloSign
Starting Price $8/user/mo $15/user/mo $14/user/mo $19/user/mo $15/user/mo
Free Trial 7-day free trial Varies by plan Varies by plan Varies by plan Varies by plan
Bulk Send Yes Yes Yes Yes No
Audit Trail Yes Yes Yes Yes Yes
HIPAA Compliant Yes Yes Yes No No

Real-World Examples of Using a Healthcare Research Addendum

Practical cases show how institutions apply addenda to enable research while protecting patient data.

Fertility Center Research

A specialty clinic sought de-identified outcomes data for outcome benchmarking

  • Clinic required a BAA and IRB exemption evidence
  • After signing an addendum that specified de-identification method and retention, the clinic shared a limited dataset under audited access controls, enabling aggregated research while preserving patient privacy.

University Data Collaboration

A university requested longitudinal EMR data for a grant-funded study

  • Institution required PI assurances and data security plans
  • The parties executed an addendum that tied data delivery to an IRB-approved protocol and required annual security attestations, allowing the study to proceed with documented safeguards.

Frequently Asked Questions About the Healthcare Research Addendum

Answers to common questions about scope, signatures, and compliance when preparing or executing an addendum.


Need help? Contact support

be ready to get more
Join over 28 million airSlate SignNow users