If you're unsure about the particulars of hipaa research requirements at your organization or have questions, you can usually consult with

No assurance about HIPAA research requirements and questions are most likely to be consulted with the people or organization like the privacy officer or the privacy board. Either of the two can be consulted but it is still depending on the current situation that the individual is in.

Cotton with iron probably