Under the HIPAA Safe Harbor method, a dataset is considered de-identified only if a covered entity removes all 18 specific identifiers of the individual or of relatives, employers, or household members of the individual. These 18 identifiers are: names; all geographic subdivisions smaller than a state, such as street address, city, county, precinct, and zip code (with limited exceptions for the first three digits of a zip code if th....
Log in to view the answer