For existing data that includes identifiable health information (like medical records data), once the identifiable health information is transferred to the HCC, the data should be protected the same as PHI gathered in the U.S. It should be stored in a HIPAA compliant manner.
For prospective data and/or specimen collection, the consent form should include HIPAA authorization language when UW researchers are involved in collection and will transfer the PHI to the UW.