3. The Expert Determination Rule, Word by Word

Module 1: Regulatory Foundation · Runtime 47:24 · YouTube title: The HIPAA Expert Determination Rule, Explained Word by Word

Your entire profession fits inside one regulatory sentence. This video puts the verbatim text of 45 CFR 164.514(b)(1) on screen and unpacks every load-bearing phrase, then turns to §164.514(c) re-identification codes and the salted-hash question.

In this video

• "Appropriate knowledge of and experience with": no degree, license, or registry, and both halves required
• What "generally accepted" actually names, and the competency test hidden in the guidance
• "Very small risk": not zero, not a number
• "Alone or in combination with other reasonably available information," "by an anticipated recipient," and "an individual who is a subject of the information"
• Who determines: the covered entity determines, the expert renders the opinion
• "Documents the methods and results": documentation is half the rule
• §164.514(c) re-identification codes, the HHS 2002 preamble on derived dummy identifiers, and the cryptographic derivation paradox
• The enforcement record and the four-phrase audit

Authorities quoted on screen

45 CFR §164.514(b)(1) verbatim; 45 CFR §164.514(c) verbatim; HHS, August 2002 Privacy Rule modifications, 67 FR 53182 (derived dummy identifiers).