HIPAA Information. The execution of the Participation Agreement and the Appendix I: Business Associate Contract & Data Use Agreement acknowledges that Participants, The Society of Thoracic Surgeons, and Duke Clinical Research Institute agree to comply with all statutes and regulations, under federal and state laws, concerning patient privacy and data security, including but not limited to the ....