Free 15-Video Course

Becoming a HIPAA Qualified ExpertThe Expert Determination Method for De-identification

There is no government certification, license, or registry for HIPAA de-identification experts. The regulation asks for appropriate knowledge of and experience with generally accepted statistical and scientific methods, which means the pathway is learnable. Fifteen narrated lectures across eight modules plus an orientation map the entire body of knowledge: the rule text, the 2012 OCR guidance, the statistics computed by hand on a ten-row table, the risk models and thresholds with their provenance, the re-identification case canon, a complete engagement, and the report you sign. Watch in order once, then use it as a reference.

Start with Video 1Connect on LinkedIn
15narrated video lectures
10 h 20 mintotal runtime
Intermediate. Basic statistics literacy assumed
Free Course
HIPAA
Qualified Expert
Produced by Subthesis

Course at a glance

15
Video lectures
Numbered, 27 to 49 minutes each
8
Modules plus orientation
Regulation to report, in order
10 h 20 min
Total runtime
Asynchronous, fully narrated

Course outline

15 videos across 8 modules plus an orientation · ~10 hours total · click any lesson to start

Module 0: Orientation

  1. Video 1

    Welcome and Course Roadmap

    27 min
    • Explain what an expert determination is
    • State why no government certification exists
    • Map the fifteen videos ahead

Module 1: Regulatory Foundation

  1. Video 2

    The De-identification Standard

    38 min
    • State the §164.514(a) standard
    • Scope PHI and its four exclusions
    • Execute Safe Harbor and audit it
  2. Video 3

    The Expert Determination Rule, Word by Word

    47 min
    • Read §164.514(b)(1) verbatim
    • Unpack every load-bearing phrase
    • Explain the two-actor determination structure

Module 2: The OCR 2012 Guidance

  1. Video 4

    The OCR Guidance: Who Is an Expert?

    36 min
    • Navigate the 2012 guidance structure
    • Summarize OCR's who-is-an-expert answer
    • Explain after-the-fact qualification review
  2. Video 5

    Very Small Risk: The Three Principles

    46 min
    • Explain why no numeric threshold exists
    • Apply the three risk principles
    • Name the guidance's transformation techniques

Module 3: Statistical Foundations

  1. Video 6

    Identifiers, Quasi-identifiers, and Uniqueness

    48 min
    • Classify fields with the NIST taxonomy
    • Compute equivalence classes and k
    • Contrast sample and population uniqueness
  2. Video 7

    The De-identification Toolbox

    49 min
    • Apply nine disclosure limitation techniques
    • Compute k-anonymity, l-diversity, t-closeness
    • Work the Laplace mechanism with numbers

Module 4: Risk Assessment

  1. Video 8

    Thinking Like the Adversary

    46 min
    • Apply the prosecutor risk model
    • Apply the journalist risk model
    • Apply the marketer risk model
  2. Video 9

    Setting and Defending a Risk Threshold

    46 min
    • Grade threshold precedents by provenance
    • Convert between cell size and probability
    • Apply agency cell-size suppression rules

Module 5: Attack Literature

  1. Video 10

    The Re-identification Case Canon

    39 min
    • Retell the landmark re-identification attacks
    • Name each attack's quasi-identifiers
    • Name each attack's auxiliary data

Module 6: Professional Pathways

  1. Video 11

    Becoming the Expert: Pathways and Credentials

    37 min
    • Map where practicing experts come from
    • Explain why no certification exists
    • Build a defensible evidence file

Module 7: Practice

  1. Video 12

    Running an Engagement: Scoping to Mitigation

    37 min
    • Name the seven engagement phases
    • Scope, classify, and assess context
    • Run mitigation to a passing result
  2. Video 13

    The Determination Report and Liability

    49 min
    • Source every report section to authority
    • Draft all ten sections in prose
    • Write a seven-part attestation letter

Module 8: Synthesis

  1. Video 14

    Beyond HIPAA: The Regulatory Overlay

    39 min
    • State the FTC three-part test
    • Map the state overlay accurately
    • Place other federal regimes correctly
  2. Video 15

    Misconceptions, FAQ, and Your Next Steps

    36 min
    • Rebut the ten common misconceptions
    • Answer the questions clients actually ask
    • Locate the post-HIPAA overlay

Questions, corrections, or a case the series should cover?

Connect on LinkedIn

This course is education about the expert determination pathway. It is not a certification, no certification for this work exists, and nothing here is legal advice. Finishing this course does not by itself make anyone a qualified expert: the regulation names knowledge and experience, and experience is earned through supervised practice that no video series can supply. Consult qualified counsel for any specific matter.