Confirm that the following 18 identifiers have been removed from the dataset. This requirement includes data elements related to the individual or relatives, employers, or household members of the individual.
- Names
- Subdivisions smaller than a state, including:
- Street Addresses
- City
- County
- Precinct
- Zip Code
- All elements of dates (except year) or dates directly related to an individual, including:
- Birth date
- Admission date
- Discharge date
- Date of death, and
- All ages over 89 and all elements of dates (except year) indicative of such age, except that such ages and elements may be aggregated into a single category of age 90 or older.
- Telephone numbers
- Fax numbers
- Electronic mail addresses
- Social Security numbers
- Medical Record numbers
- Health plan beneficiary numbers
- Account numbers
- Certificate/license numbers
- Vehicle identifiers and serial numbers, including license plate numbers
- Device identifiers and serial numbers
- Web universal resource locators (URLs)
- Internet Protocol (IP) address numbers
- Biometric identifiers, including finger and voice prints
- Full-face photographic images and any comparable images
- Any other unique identifying number, characteristic, or code, except as permitted by the re-identification rules below.
Re-identification
A researcher authorized to view the PHI may assign a code or other means of record identification to allow de-identified information to be re-identified, provided that:
- Derivation: The code or other means of record identification is not derived from or related to information about the individual and is not otherwise capable of being translated so as to identify the individual; and
- Security: The authorized researcher does not use or disclose the code or other means of record identification for any other purpose, and does not disclose the mechanism for re-identification.
Return to Clinic preparation tips
Return to the main Biostatistics Clinics page