Is SPARC HIPAA compliant?

No

You are not allowed to upload personal identifiable data to the SPARC Portal. SPARC is focused on making data publicly available and it is the responsibility of the investigators who submit data to ensure that their data is compliant with their IRB regulations.

In general, this means that investigators should not upload data containing personal identifiers.

In addition, the SPARC platform does not claim HIPAA compliance from a technical point of view. Although the platform adheres to all security and compliance recommendations for HIPAA, we have not been audited for HIPAA attestation.