The HIPAA preparatory to research provision permits covered entities, i.e., physicians / investigator sites, to use or disclose protected health information (PHI, i.e., individually identifiable health information that has “touched” a covered entity) for purposes preparatory to research, such as the generation of hypotheses for testing and the screening of potential subjects for inclusion in research studies