ComplianceOnline

HIPAA - De-Identified Health Information


There are no restrictions on the use or disclosure of de-identified health information. De-identified health information neither identifies nor provides a reasonable basis to identify an individual.

There are two ways to de-identify information; either:

  1. a formal determination by a qualified statistician; or
  2. the removal of specified identifiers of the individual and of the individual’s relatives, household members, and employers is required, and is adequate only if the covered entity has no actual knowledge that the remaining information could be used to identify the individual.