The Office of Compliance has published new guidance for study teams with members both within and outside the healthcare component (HCC). This document should be used prior to making any arrangements/plans to receive or use protected health information (e.g. submitting an IRB protocol, entering into a contract/agreement to receive protected health information