If you build it, *can* they come? Your newfangled ultra-secure research data collection tool is ready to go, but can you actually collect any data with it? What about using that HIPAA-compliant de-identification tool? This session will explore how privacy complements security in the review and support of research projects, and what it does and *doesn’t* mean to be <insert regulation/> compliant.