Skip to cookie consent Skip to main content

Protecting Your Privacy

Learn more about the Biobank at Mass General Brigham’s privacy safeguards, which are based on laws and federal regulations.

Your privacy is very important to us, and we make every effort to protect it. We protect your privacy by assigning a code to your samples and health information. The key to the code is stored in a secure file that is kept separate from your blood sample and health information. The only people who can see your identifiable information, such as your name, date of birth, and medical record number, are trained staff from the Mass General Brigham Biobank or Mass General Brigham researchers who have approval from the Mass General Brigham Institutional Review Board (IRB) to use you information for research.

The Mass General Brigham Biobank privacy safeguards are based on laws and federal regulations. One key law is the Privacy Rule that is part of the Health Insurance Portability and Accountability Act commonly known as HIPAA.  Another is the Genetics Information Non-Discrimination Act, or GINA, which is a federal law that protects genetic information from being used to discriminate against people when they apply for health insurance or employment at companies with more than 15 employees. GINA does not protect people when they are applying for life insurance, disability insurance, or long-term care insurance.

In order to obtain samples and data, a researcher must first submit a request in writing.  This request includes a description of the research to be done, a list of the researchers involved, and what type of samples will be needed. In most cases, the Mass General Brigham Biobank will provide a de-identified sample – in such cases, the researcher does not receive any information that could be used to identify you.

If a researcher needs identifiable information, he or she must first get approval from the Mass General Brigham Institutional Review Board (IRB).  The Mass General Brigham researcher would submit a request to the IRB to access identifiable sample and health information. The IRB evaluates these requests carefully before approving them to help ensure that your privacy is protected and that the research request is sound. 

Researchers often collaborate with other researchers who may be at another Mass General Brigham institution, another research institution in Massachusetts, another state or country or a for-profit company.  Researchers outside of Mass General Brigham institutions will not be able to see your identifiable information.  Researchers outside Mass General Brigham who are collaborating with Mass General Brigham researchers can only get deidentified samples. 

For any research, not just the Mass General Brigham Biobank research project, there are situations in which we must provide identifiable information to others for research oversight, quality control and public health and safety. Groups or individuals who may see your information for these purposes include the Mass General Brigham IRB, organizations that provide independent accreditation and oversight of hospitals and research, federal and state agencies (such as the Food and Drug Administration), quality control groups, and people or organizations that we hire to do work for us, such as data storage companies, insurers, and lawyers.

We share your identifiable health information with these oversight groups only when we must, and we expect anyone who receives it to protect your privacy. However, once your information is shared outside of Mass General Brigham, we cannot promise that it will remain private.

We hope that this information helps you to understand the important information provided in the Informed Consent Form. After you have read the Informed Consent Form, if you have any additional questions, you can view answers to frequently asked questions in the FAQ section of this web site or feel free to contact our staff at the Mass General Brigham Biobank.