{"id":21162,"date":"2026-10-09T17:49:13","date_gmt":"2026-10-09T21:49:13","guid":{"rendered":"https:\/\/www.rochester.edu\/ohsp\/?page_id=21162"},"modified":"2026-10-09T17:49:13","modified_gmt":"2026-10-09T21:49:13","slug":"hipaa-the-18-protected-health-information-phi-identifiers","status":"publish","type":"page","link":"https:\/\/www.rochester.edu\/ohsp\/hipaa-the-18-protected-health-information-phi-identifiers\/","title":{"rendered":"HIPAA: The 18 Protected Health Information (PHI) Identifiers"},"content":{"rendered":"

In order for a record (or research data set) to be considered de-identified, each of the above identifiers must be removed.\u00a0 This is applicable to identifiers of the individual, or of relatives, employers, or household members of the individual.<\/strong><\/p>\n

    \n
  1. Names<\/li>\n
  2. Geographic subdivisions smaller than a state if it contains less than 20,000 people (the initial three digits of the zip code are allowed).\u00a0 This includes street address, city, county, precinct, and zip code (or equivalent geocodes).\n
      \n
    • The initial three digits of a zip code may be included if, according to the currently publicly available data from the Bureau of Census the geographic unit formed by combining all zip codes with the same three initial digits contains more than 20,000 people, and the initial three digits of a zip code for all such geographic units containing 20,000 or fewer people is changed to \u201c000\u201d<\/li>\n<\/ul>\n<\/li>\n
    • Dates\n
        \n
      • All elements of dates<\/strong> (except year) for dates directly related to an individual (including birth date, admission date, date of service, discharge date, date of death<\/strong>), and all ages over 89 (including year) indicative of such age, except that such ages and elements may be aggregated into a single category of age 90 or older<\/li>\n<\/ul>\n<\/li>\n
      • Telephone numbers<\/li>\n
      • Fax numbers<\/li>\n
      • E-mail addresses<\/li>\n
      • Social security numbers<\/li>\n
      • Medical record numbers<\/li>\n
      • Health plan beneficiary numbers<\/li>\n
      • Account numbers<\/li>\n
      • Certificate or license numbers<\/li>\n
      • Vehicle identifiers, serial numbers, and license plate numbers<\/li>\n
      • Device identifiers and serial numbers<\/li>\n
      • Internet Universal Resource Locators (URLs)<\/li>\n
      • Computer Internet Protocol (IP) addresses<\/li>\n
      • Biometric identifiers<\/li>\n
      • Full-face photographs and comparable images<\/li>\n
      • Any other unique identifying number, characteristic, or code, except as permitted for re-identification of the de-identified data<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"

        In order for a record (or research data set) to be considered de-identified, each of the above identifiers must be removed.\u00a0 This is applicable to identifiers of the individual, or…<\/p>\n","protected":false},"author":146,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":"","_members_access_role":[],"_members_access_error":""},"class_list":["post-21162","page","type-page","status-publish","hentry"],"acf":{"lead_in":"","display_title":"","subtitle":"","call_to_action":"","hero_image_placement":"no_image","hero_media":"images","hero_pattern_option":"","hero_video":"","hero_image_landing":"","hero_image_landing_two":"","hero_image_landing_three":"","content_modules":null},"yoast_head":"\nHIPAA: The 18 Protected Health Information (PHI) Identifiers - Office for Human Subject Protection<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.rochester.edu\/ohsp\/hipaa-the-18-protected-health-information-phi-identifiers\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"HIPAA: The 18 Protected Health Information (PHI) Identifiers - Office for Human Subject Protection\" \/>\n<meta property=\"og:description\" content=\"In order for a record (or research data set) to be considered de-identified, each of the above identifiers must be removed.\u00a0 This is applicable to identifiers of the individual, or…\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.rochester.edu\/ohsp\/hipaa-the-18-protected-health-information-phi-identifiers\/\" \/>\n<meta property=\"og:site_name\" content=\"Office for Human Subject Protection\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.rochester.edu\\\/ohsp\\\/hipaa-the-18-protected-health-information-phi-identifiers\\\/\",\"url\":\"https:\\\/\\\/www.rochester.edu\\\/ohsp\\\/hipaa-the-18-protected-health-information-phi-identifiers\\\/\",\"name\":\"HIPAA: The 18 Protected Health Information (PHI) Identifiers - Office for Human Subject Protection\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.rochester.edu\\\/ohsp\\\/#website\"},\"datePublished\":\"2026-10-09T21:49:13+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.rochester.edu\\\/ohsp\\\/hipaa-the-18-protected-health-information-phi-identifiers\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.rochester.edu\\\/ohsp\\\/hipaa-the-18-protected-health-information-phi-identifiers\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.rochester.edu\\\/ohsp\\\/hipaa-the-18-protected-health-information-phi-identifiers\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.rochester.edu\\\/ohsp\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"HIPAA: The 18 Protected Health Information (PHI) Identifiers\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.rochester.edu\\\/ohsp\\\/#website\",\"url\":\"https:\\\/\\\/www.rochester.edu\\\/ohsp\\\/\",\"name\":\"Office for Human Subject Protection\",\"description\":\"University of Rochester\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.rochester.edu\\\/ohsp\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"HIPAA: The 18 Protected Health Information (PHI) Identifiers - Office for Human Subject Protection","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.rochester.edu\/ohsp\/hipaa-the-18-protected-health-information-phi-identifiers\/","og_locale":"en_US","og_type":"article","og_title":"HIPAA: The 18 Protected Health Information (PHI) Identifiers - Office for Human Subject Protection","og_description":"In order for a record (or research data set) to be considered de-identified, each of the above identifiers must be removed.\u00a0 This is applicable to identifiers of the individual, or…","og_url":"https:\/\/www.rochester.edu\/ohsp\/hipaa-the-18-protected-health-information-phi-identifiers\/","og_site_name":"Office for Human Subject Protection","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.rochester.edu\/ohsp\/hipaa-the-18-protected-health-information-phi-identifiers\/","url":"https:\/\/www.rochester.edu\/ohsp\/hipaa-the-18-protected-health-information-phi-identifiers\/","name":"HIPAA: The 18 Protected Health Information (PHI) Identifiers - Office for Human Subject Protection","isPartOf":{"@id":"https:\/\/www.rochester.edu\/ohsp\/#website"},"datePublished":"2026-10-09T21:49:13+00:00","breadcrumb":{"@id":"https:\/\/www.rochester.edu\/ohsp\/hipaa-the-18-protected-health-information-phi-identifiers\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.rochester.edu\/ohsp\/hipaa-the-18-protected-health-information-phi-identifiers\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.rochester.edu\/ohsp\/hipaa-the-18-protected-health-information-phi-identifiers\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.rochester.edu\/ohsp\/"},{"@type":"ListItem","position":2,"name":"HIPAA: The 18 Protected Health Information (PHI) Identifiers"}]},{"@type":"WebSite","@id":"https:\/\/www.rochester.edu\/ohsp\/#website","url":"https:\/\/www.rochester.edu\/ohsp\/","name":"Office for Human Subject Protection","description":"University of Rochester","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.rochester.edu\/ohsp\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/www.rochester.edu\/ohsp\/wp-json\/wp\/v2\/pages\/21162","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.rochester.edu\/ohsp\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.rochester.edu\/ohsp\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.rochester.edu\/ohsp\/wp-json\/wp\/v2\/users\/146"}],"replies":[{"embeddable":true,"href":"https:\/\/www.rochester.edu\/ohsp\/wp-json\/wp\/v2\/comments?post=21162"}],"version-history":[{"count":4,"href":"https:\/\/www.rochester.edu\/ohsp\/wp-json\/wp\/v2\/pages\/21162\/revisions"}],"predecessor-version":[{"id":21212,"href":"https:\/\/www.rochester.edu\/ohsp\/wp-json\/wp\/v2\/pages\/21162\/revisions\/21212"}],"wp:attachment":[{"href":"https:\/\/www.rochester.edu\/ohsp\/wp-json\/wp\/v2\/media?parent=21162"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}