{"id":7742,"date":"2024-01-26T14:31:26","date_gmt":"2024-01-26T19:31:26","guid":{"rendered":"https:\/\/www.rochester.edu\/university-research\/?page_id=7742"},"modified":"2026-07-01T08:51:23","modified_gmt":"2026-07-01T12:51:23","slug":"data-de-identification-services","status":"publish","type":"page","link":"https:\/\/www.rochester.edu\/university-research\/resources-and-training\/data-computing\/data-de-identification-services\/","title":{"rendered":"Data De-Identification Services"},"content":{"rendered":"

The Office of the Vice President for Research in conjunction with the Clinical & Translational Science Institute (CTSI)<\/a> offers a data de-identification service for the University research community. This service helps with the removal or masking of elements in research datasets that contain Protected Health Information (PHI) prior to publicly sharing or publishing the data.<\/p>\n

Reach out for a consultation <\/i><\/a><\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

The Office of the Vice President for Research in conjunction with the Clinical & Translational Science Institute (CTSI) offers a data de-identification service for the University research community. This service…<\/p>\n","protected":false},"author":76,"featured_media":0,"parent":18632,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"page-templates\/one-column.php","meta":{"_acf_changed":false,"footnotes":"","_members_access_role":[],"_members_access_error":""},"class_list":["post-7742","page","type-page","status-publish","hentry"],"acf":{"lead_in":"","display_title":"","subtitle":"","call_to_action":"","hero_image_placement":"no_image","hero_media":"images","hero_pattern_option":"","hero_video":"","hero_image_landing":"","hero_image_landing_two":"","hero_image_landing_three":"","content_modules_above":null,"sidebar":"show__sidebar","sidebar_feed":"menu_select","menu":"202","page_links":null,"sub_menu":"","content_modules":[{"acf_fc_layout":"text","anchor":"definition","css_class":"","title":"

What does de-identified data mean?<\/h2>","content":"De-identified data means that individually identifiable<\/strong> health information (Protected Health Information, or PHI) has been deleted from the research data set. Health information relates to the physical or mental health of an individual, the provision of health care to an individual, or payment for health care. In particular, de-identified data means that all 18 HIPAA Identifiers<\/a> have been removed, including derivatives such as initials and truncated Social Security numbers. Additionally, the remaining data must not be identifiable, i.e. able to be used alone or in combination with other information to identify an individual. (For example, genetic data or samples devoid of HIPAA identifiers can be used to identify an individual.) The Data De-identification Service can help make this determination.\r\n\r\nOnce data are de-identified, the data are not considered PHI under the Health Insurance Portability and Accountability Act (HIPAA), so HIPAA\u2019s requirements do not apply.","background_color":"#f4f4f4","width":"width-medium"},{"acf_fc_layout":"card_grid","anchor":"need","css_class":"max-text-left","title":"","description":"

When is data de-identification needed?<\/h2>\r\nI<\/strong>f any of the following scenarios are true<\/strong>, then a research data set containing PHI must be de-identified <\/strong>prior to sharing.\r\n\r\n ","background_color":"#FFFFFF","width":"width-large","columns":"3","cards":[{"card_title":"","card_text":"Need to publicly share your research data per sponsoring agency regulations (such as the NIH Policy for Data Management and Sharing<\/a>)","card_background_color":"#f4f4f4","card_hover_color":"transparent","card_link":"","card_hover_arrow":"","card_image":"","card_image_size":"","card_image_placement":"","card_image_hover_state":"hover_fade","card_image_link":""},{"card_title":"","card_text":"Submitting raw data to journals to support your publication of research results. (See the Office of Human Subject Protection's Guideline on De-Identification for Publishing<\/a> for more detail.)","card_background_color":"#f4f4f4","card_hover_color":"transparent","card_link":"","card_hover_arrow":"","card_image":"","card_image_size":"","card_image_placement":"","card_image_hover_state":"hover_fade","card_image_link":""},{"card_title":"","card_text":"Sharing your data with non-University of Rochester partners without subject authorization, an IRB waiver of authorization, or a Data Use Agreement for limited datasets.","card_background_color":"#f4f4f4","card_hover_color":"transparent","card_link":"","card_hover_arrow":"","card_image":"","card_image_size":"","card_image_placement":"","card_image_hover_state":"hover_fade","card_image_link":""}]},{"acf_fc_layout":"text","anchor":"","css_class":"pt-0","title":"","content":"Data de-identification is a permissible direct cost under the NIH Policy for Data Management and Sharing<\/a> and researchers are encouraged to and should budget for de-identification in their budget proposals.","background_color":"#ffffff","width":"width-medium"},{"acf_fc_layout":"text","anchor":"services","css_class":"","title":"

Services we offer<\/h2>","content":"