27 Automated IRB compliance and secure data delivery in i2b2

Objectives/Goals: To address the manual, time-consuming processes of validating IRB compliance and ensuring the secure delivery of i2b2 data, this project automates compliance checks, streamlines Protected Health Information (PHI) access, and provides timely, secure data availability while reducing administrative burdens and non-compliance risks. Methods/Study Population: This project enhances the i2b2 application to automate compliance processes and facilitate secure data delivery through integration with REDCap. By linking i2b2 with the IRB system, the application performs automatic compliance checks for project requests, verifying GCP and HIPAA certifications, only allowing the release of IRB-approved PHI variables, safeguarding against unauthorized data access. Manual signatures confirm non-automated compliance processes. Once verified, the application automatically creates a REDCap project, assigns user access, and securely delivers data, ensuring compliance with HIPAA regulations. Results/Anticipated Results: The automated system successfully streamlined IRB compliance checks and data delivery for i2b2 requests. Validation of certifications like GCP and HIPAA, now occurs automatically, significantly reducing the risk of non-compliance. Personnel access to data is limited to IRB-approved PHI, ensuring data security and adherence to institutional standards. The integration with REDCap has reduced manual processes, cutting data request processing time to approximately 30 minutes. Researchers and administrative staff experienced a notable decrease in administrative burden, with faster, more efficient access to approved data while maintaining full compliance with IRB and HIPAA regulations. Discussion/Significance of Impact: The lessons learned can be adapted by institutions to improve compliance efficiency and reduce administrative overhead. Implementing similar automation of certification checks and data delivery, sites can enhance data security, minimize errors, and ensure faster, compliant access to research data.