De-indentify health information

[Xiaochun Tong]

Has anyone done any work in de-indentifying Protected Health Information for the purpose of reporting data to public health agencies with minimal privacy risk?

We appreciate any advice or insights on this topic. Thanks in advance.

Topic

[Jim Kosloskey]

I am not a lawyer, but I seem to recall that if you have a ‘Trusted Partner’ agreement (I think that is what it is called) with the partner, sending Protected information programmatically does not put you in violation.

I believe Public Health agencies are all government agencies and I also think all Government Agencies have a blanket ‘Trusted Partner’ status.

email: jim.kosloskey@jim-kosloskey.com 29+ years Cloverleaf, 59 years IT - old fart.

[Troy Morton]

You do (by law) have to encrypt the data if it is sent outside your internal network (through the firewall).

[David Barr]

Troy Morton wrote:

Using SFTP, HTTPS, VPN, Password protected ZIP file(s) are all sufficient to meet the requirements.

[Author]

Replies