HIPAA De-identification

1. De-identification guidance

   Two methods of de-identification and common misconceptions.

2. Safe Harbor method

   Removal of 18 identifier types and zip and date generalization.

3. Expert determination

   Statistical determination of very small re-identification risk.

4. 45 CFR 164.514

   Regulation text for de-identification and limited data sets.

5. Limited data sets

   Data use agreements for limited data sets.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.

• 42 CFR Part 2 (SUD records)
• HIPAA Administrative Simplification (Transactions and Code Sets)
• HIPAA Breach Notification Rule
• HIPAA Privacy Rule
• HIPAA Security Rule
• HITECH Act
• HITRUST CSF
• No Surprises Act
• ONC Information Blocking (Cures Act)