2. The De-identification Standard
After this video you can
- State the §164.514(a) standard
- Scope PHI and its four exclusions
- Execute Safe Harbor and audit it
- Classify the five data products
Module 1: Regulatory Foundation · Runtime 37:47 · YouTube title: HIPAA De-identification: Safe Harbor vs Expert Determination
One section of the Privacy Rule decides whether health data is regulated or free. This video reads §164.514(a) and its two prongs, applies Safe Harbor's eighteen identifiers to a real table, and separates the five data products that get confused with one another.
In this video
- The 45 CFR 164.514(a) standard and its two prongs
- Safe Harbor's eighteen identifiers, applied to the Springfield extract
- The overlooked chapeau: relatives, household members, and employers count
- The ZIP3 rule and the actual-knowledge condition
- Why the Limited Data Set is still regulated PHI, and why pseudonymized data is not a HIPAA category
- The business associate boundary: PHI in, non-PHI out
Authorities quoted on screen
45 CFR §160.103 (definition of protected health information and its four exclusions); 45 CFR §164.514(a) and (b).
Key takeaways
- De-identified data exits HIPAA entirely, which is why the standard is policed through documentation.
- Safe Harbor ends in two judgment calls, which is exactly where experts begin.
- Name the product before you price the work, because each product carries a different contract.
Coming next: Video 3, The Expert Determination Rule, Word by Word
Your entire profession fits inside one regulatory sentence. This video puts the verbatim text of 45 CFR 164.514(b)(1) on screen and unpacks every load-bearing phrase, then turns to §164.514(c) re-identification codes and the salted-hash question.
Saved in your browser only — no account, no server.