The second meeting of the Committee on Health Research and the Privacy of Health Information: the HIPAA Privacy Rule was held on February 14-15, 2008. The committee heard presentations from experts involved with future use of databases and repositories, autonomy and privacy in health research, and public health research versus public health practice. Survey results, some preliminary, were also presented to the committee.