Under an approved request, use of the released data is limited to the specific purpose as described in the original application. Further use of the data for a purpose not reflected in the original application would require a new request that fully complies with the privacy and security requirements of HIPAA.