domain-healthcare:phi-data-handling

Protected Health Information includes 18 specific HIPAA identifiers such as names, geographic subdivisions smaller than a state, dates, phone numbers, and medical record numbers. This Skill outlines all 18 identifiers to help you determine when data constitutes PHI.

To de-identify healthcare data using Safe Harbor, you must remove the 18 specific HIPAA identifiers from the dataset. This Skill provides guidance on applying the Safe Harbor method to ensure compliant data anonymization for research.

Safe Harbor requires removing 18 specific HIPAA identifiers, while Expert Determination involves statistical analysis to certify re-identification risk is minimal. This Skill explains both de-identification techniques to help you choose the appropriate method.

Implementing role-based access controls and audit logging for PHI requires designing robust permissions and tracking systems. This Skill provides guidance on establishing access controls and audit logs to meet HIPAA compliance requirements.

HIPAA compliance requires applying secure encryption methods to protect PHI and following compliant data disposal practices. This Skill guides you through implementing encryption and secure disposal to prevent unauthorized access and breaches.