Privacy Rule regulations apply to chart review (medical records research) just as they do to any other research use of protected health information (PHI). Frequently, chart review will satisfy Privacy Rule requirements for a waiver of authorization if it also satisfied the requirements for a waiver of informed consent under the Common Rule.