Establishing secure connection…Loading editor…Preparing document…

Healthcare Study Annex

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

HEALTHCARE STUDY ANNEX

Participant Name:    Date of Birth:

Protocol Number:    Study Title:

Principal Investigator:    Study Site:

1. Purpose and Scope

This Annex supplements and forms part of the primary Informed Consent and Study Agreement for the above-referenced protocol. It documents specific participant permissions, authorizations, and acknowledgements relating to additional study procedures, use of specimens and protected health information, and long-term data use. Participation in items identified below is voluntary and may be declined without affecting standard study participation unless otherwise specified in the main consent.

2. Participant Contact and Insurance

3. Medical History (for study records)

4. Additional Procedures and Authorizations

The Participant authorizes the following additional procedures as part of this Annex. Each item may be independently declined by leaving the checkbox unchecked.

Collection of additional blood samples for ancillary analyses (e.g., biomarker assays).

Storage of biological specimens for future research, including long-term biobanking.

Genetic and genomic testing on collected specimens, which may include sequencing and analysis of DNA/RNA.

De-identified or coded data sharing with external researchers and collaborators for future studies.

5. Use and Disclosure of Protected Health Information

By signing this Annex the Participant authorizes the use and disclosure of Protected Health Information (PHI) created or received in the course of the study for the purposes described herein, including study oversight, data analysis, regulatory review, and future research consistent with the permissions granted above. PHI that is disclosed may include medical records, laboratory results, imaging, and study case report forms.

Recipients of PHI may include the Study Sponsor, contract research organizations, regulatory authorities, and collaborating investigators. De-identified or coded information will be used when feasible; however, identifiers may be included where necessary for follow-up or data linkage.

The Participant understands that this authorization may be revoked at any time by written notice to the Study Contact identified below, except to the extent that action has already been taken in reliance on this authorization. Revocation will not affect uses or disclosures made prior to receipt of the revocation.

6. Storage, De-identification, and Commercial Use

Stored specimens and data may be de-identified and used for future research, training, or quality improvement. The Participant hereby acknowledges that any discovery or commercial development resulting from future research using de-identified specimens or data will not entitle the Participant to financial compensation beyond what is specified in the main consent or this Annex.

I authorize the Study to: permit use of specimens/data in research that may lead to commercial products or intellectual property.

7. Risks, Benefits, and Alternatives

The Participant acknowledges that additional procedures described in this Annex may entail risks beyond those described in the main consent. The Participant has had the opportunity to discuss foreseeable risks and potential benefits with study staff and understands that there may be no direct benefit from participation in ancillary procedures.

8. Compensation and Costs

There will be no additional cost to the Participant for the procedures expressly authorized in this Annex unless otherwise specified. Reimbursement or compensation for time and travel related to ancillary procedures, if offered, will be described and documented below.

Travel reimbursement: Provided

9. Withdrawal and Revocation

The Participant may withdraw consent for any or all parts of this Annex at any time by providing written notice to the Study Contact named below. Withdrawal of consent will not affect the lawfulness of disclosures made prior to receipt of the withdrawal.

10. Certifications and Acknowledgements

By signing below, the Participant certifies that they have read and understand the provisions of this Annex, have had an opportunity to ask questions and receive answers, and agree voluntarily to the authorized procedures and uses of information and specimens indicated above. The Participant further acknowledges receipt of a copy of this Annex.

HIPAA Authorization: I authorize the use and disclosure of my protected health information as described in Section 5.

Printed Name:

Signature:

Relationship to Participant:

Date:

Enter text✕
Prepare your document for signing right on this page
  • 01 Edit the text and complete the fields
  • 02 Click Sign Now and on the next screen add recipients and signature fields in SignNow
  • 03 Start your free trial to sign and send your doc
Sign Now

What the Healthcare Study Annex Is and when it applies

A Healthcare Study Annex is an addendum to a research or data-sharing agreement that specifies how clinical or patient data will be accessed, used, protected, and shared for a particular study. It typically identifies the study scope, data elements (including PHI), participant consent status, roles and responsibilities of sponsor and site, security and retention requirements, and any IRB or regulatory approvals required before data transfer. The annex provides a written record that operationalizes privacy obligations and technical controls specific to the study.

Why a Study-Specific Annex matters for compliance

A study-specific annex narrows broad agreements into actionable rules for one protocol, reducing ambiguity about PHI handling, auditability, and legal liability.

Why a Study-Specific Annex matters for compliance

Who typically completes a Healthcare Study Annex

Key stakeholders who prepare or sign the annex are listed below.

  • Study sponsors and clinical operations teams responsible for protocol compliance and data delivery.
  • Institutional review boards (IRBs) and compliance officers who verify consent and protections.
  • Site administrators and research coordinators who implement data access and collection procedures.

Multiple parties usually approve the annex: legal, privacy, IRB, and operational leads must confirm terms before signatures are collected.

Core components included in an effective Healthcare Study Annex

A complete annex organizes responsibilities, controls, and timelines so each party understands obligations during the study lifecycle.

Purpose & Scope

Defines the study name, objectives, covered datasets, and permitted uses so transfers align with the research protocol and consent.

Parties & Roles

Names the sponsor, data custodian, processors, and any subcontractors and describes each party’s responsibilities for access, security, and reporting.

Data Description

Lists data elements to be shared, indicating which fields contain PHI, de-identified data, or limited data sets and any required transformations.

Consent & IRB

Confirms that informed consent and IRB approval allow the proposed uses and specifies consent language or opt-out mechanisms if applicable.

Security Controls

Specifies encryption, access controls, authentication, logging, and breach notification procedures required for the study environment.

Audit & Reporting

Describes audit rights, periodic reporting, retention periods, and obligations in the event of findings or regulatory requests.

Essential fields to include in the annex

Study Identifier: Protocol number or study code.
Sponsor Name: Legal entity sponsoring the study.
Data Categories: PHI, de-identified, lab results.
IRB Approval: IRB name and approval date.
Security Requirements: Encryption and access controls.
Retention Period: Retention length and basis.

Step-by-step: completing the Healthcare Study Annex

Follow these practical steps to prepare and complete the annex so the study can begin without compliance gaps.

  • 01
    Draft the Annex: Assemble study metadata, data fields, and protocol references.
  • 02
    Confirm Consent & IRB: Attach consent language and IRB approval or exemption documentation.
  • 03
    Specify Controls: List encryption, authentication, logging, and breach response details.
  • 04
    Collect Signatures: Obtain signatures from sponsor, site PI, and data custodian before data transfer.

Configuring an online annex workflow

Set up fields, signer order, and authentication rules before sending the annex to ensure proper routing and audit capture.

Field Configuration
Signer Order Sponsor → Site PI → Data Custodian
Authentication Email plus SMS code for non-sensitive signers
Conditional Fields Show PHI-handling details when PHI is selected
Audit Trail Enable full IP, timestamp, and action logging

Technical requirements for secure eSubmission

Confirm file formats, integrations, and authentication to match your compliance and operational needs.

  • Formats Supported: PDF, DOCX, and scanned images.
  • Integrations: Connectors for EHR, Google Drive, and Box.
  • Authentication: Email, SMS OTP, and SSO options.

Ensure the platform captures an auditable certificate of completion and supports any required BAA or 21 CFR Part 11 controls for your study.

Typical routing and submission flow for the annex

A standardized sequence reduces signer confusion and ensures all regulatory checks occur before data movement.

  • Prepare Document: Populate study fields and attach IRB approval.
  • Assign Signers: Set signer order and authentication levels.
  • Collect Signatures: Signers authenticate and sign electronically.
  • Archive & Share: Store executed annex and distribute copies to stakeholders.

Key timelines and when tasks must be completed

Time-sensitive milestones ensure compliance before study activities begin and during data handling phases.

IRB Approval Before Transfer:

IRB approval must be in place before any PHI is shared.

Signatures Before Access:

All required parties must sign prior to data access or transfer.

Retention Start Date:

Retention counts from document creation or effective date.

Breach Notification Window:

Notify affected parties per policy timelines and regulator rules.

Periodic Review:

Review annex terms upon protocol amendments or annually.

Milestone timeline for finalizing and executing the annex

Sequential milestones help teams track progress from draft to data transfer.

01

Draft Finalization

Circulate and finalize terms with legal and operations teams.

02

IRB Confirmation

Obtain IRB approval or documented exemption for the study.

03

Signatory Completion

Collect required signatures in the agreed signer order.

04

Data Transfer Start

Begin data sharing only after executed annex and controls are verified.

Common mistakes to avoid when preparing the annex

  • Failing to attach IRB approval before data exchange, which can lead to noncompliance.
  • Using vague data descriptions that leave PHI status ambiguous and complicate safeguards.
  • Skipping an audit trail requirement, making post-incident investigations difficult.
  • Neglecting to update annex after protocol amendments, causing mismatch with operational practices.

Risks and potential penalties of an incomplete or incorrect annex

HIPAA Enforcement: Civil penalties and corrective action for PHI breaches; OCR enforcement possible.
Research Noncompliance: IRB sanctions, suspension of study activities, and reporting obligations.
Contract Damages: Breach claims and indemnity obligations under the main agreement.
Regulatory Delays: Delayed approvals or data access pending corrective actions.
Reputational Harm: Loss of trust with participants and partner institutions.
Data Remediation Costs: Expenses for notification, remediation, and monitoring after an incident.

Real-world examples of how an annex is used

Two scenarios show how an annex clarifies responsibilities and accelerates study startup.

Academic Clinical Trial

A university IRB required a detailed PHI handling section

  • Sponsor provided dataset dictionary
  • Annex prevented delays by standardizing data de-identification and logging, enabling timely site activation and secure data transfer workflows.

Multi-Site Observational Study

A sponsor needed consistent data use terms across sites

  • Sites varied in technical controls
  • The annex standardized encryption and audit obligations, simplifying vendor onboarding and audit preparation across jurisdictions.

How the Healthcare Study Annex differs from a Data Use Agreement

A quick comparison clarifies when to use an annex versus a full Data Use Agreement.

Criteria Healthcare Study Annex Data Use Agreement
Primary Purpose study-specific data controls broad data sharing terms
PHI Focus
Regulatory Attachments irb and consent details often dua and baa
Typical Length shorter, protocol-focused longer, general-use terms

Typical eSignature platform pricing and feature overview

Compare common plan features and starting prices across leading eSignature vendors. signNow appears first in the table as requested.

signNow DocuSign Adobe Sign PandaDoc HelloSign
Starting Price $8/user/mo $15/user/mo $14/user/mo $19/user/mo $15/user/mo
Free Trial 7-day free trial No No No No
Bulk Send Yes Yes Yes Yes No
Audit Trail Yes Yes Yes Yes Yes
HIPAA Compliant Yes Yes Yes No No
Envelope Cap No cap 100 envelopes/user/year Varies by plan Varies by plan Varies by plan

Frequently asked questions about the Healthcare Study Annex

Answers to common questions about signatures, compliance, and correcting annex entries.


Need help? Contact support

be ready to get more
Join over 28 million airSlate SignNow users
Sign Now
Company
Forms
Pricing
Resources
Knowledge base
Other Products
© 2026 airSlate Inc. All rights reserved.