The U.S. Department of Health and Human Services (“HHS”) has announced that the federal government is contemplating establishing mandatory data security and information protection standards for identifiable information collected from human research subjects. HHS made this announcement in a July 26, 2011 Advance Notice of Proposed Rulemaking.

The “Common Rule,” 45 C.F.R. 46, is