Yes. HIPAA applies to clinical research that includes a treatment element or protocol, such as images or medications. In addition to the information provided in Privacy Policies 30 (Research), 31 (Limited Data Sets, and 32 (De-Identified Data), investigators may refer to IRB policies and to the NIH’s “Clinical Research and the HIPAA Privacy Rule” fact sheet