Additionally, she could obtain consent from the hospital's IRB to access, use and/or disclose certain aspects of the patient's health information. Nonetheless, Sue is required not to disclose a patient's protected health information, such as name, social security number, and/or other identifiable information, even if consent is granted (McGowan, 2012). It could also use data published in peer-reviewed journals. In doing so, Sue could avoid violating hospital policies, HIPPA Privacy Rules, and/or the ANA Code of Ethics to complete her academic work (McGonigle & Matrian,