It depends. For consistency and ease of review, the DHA PCLO requires the use of DHA’s HIPAA Authorization template to obtain data managed by DHA (DHA data). DHA’s HIPAA Authorization template is HIPAA compliant and, therefore, reduces the potential for non-compliance. The DHA HIPAA Authorization template also facilitates uniform reviews and documentation throughout the Department of Defense (DOD). If a researcher has obtained a HIPAA Waiver of Authorization from a non-DOD Institutional Review Board (IRB) and the researcher does not intend to put the DHA data into a repository, the DHA PCLO will accept the non-DOD IRB Waiver of Authorization, but the researcher must provide a completed and signed IRB Waiver of HIPAA Authorization Certification from the non-DOD IRB confirming that the Waiver of Authorization is HIPAA compliant.