Can researchers continue to use previously existing databanks or repositories?

Yes. Under the HIPAA Privacy Rule, covered entities may use or disclose PHI from existing databases or repositories for research purposes either with individual authorization, or with a waiver of individual authorization.