University of Minnesota
University Relations
http://www.umn.edu/urelate
612-624-6868
University of Minnesota
POLICY LIBRARY
PROCEDURE
University of Minnesota
University of Minnesota
University M logo on blue background
ADMINISTRATIVE PROCEDURE
Home : Administration & Operations : Health Sciences

De-identifying Data for Research

Printed on: . Please go to http://policy.umn.edu for the most current version of the Policy or related document.

De-identified data is not PHI and therefore, is not subject to the rules applicable to PHI. However, de-identified data is still subject to this procedure and rules related to IRB review. Before using de-identified data in human subjects research, researchers are required to submit to the IRB an application for research exemption from committee review or an IRB application for committee review and approval.

DE-IDENTIFICATION STANDARD

Data is de-identified if, in accordance with the de-identification standard, 45 C.F.R. §164.514(a)(b), a person with appropriate knowledge and skill uses accepted scientific principles and methods to determine the risk is very small that information could be used to identify the individual and documents the method used to justify such a conclusion; or if all of the following identifiers for the individual and the individual's relatives, employers or household members are removed:

  1. Name
  2. All geographic subdivisions smaller than a state (street address, city, county, precinct) Note: zip code or equivalents must be removed, but can retain first 3 digits if the geographic unit to which the zip code applies if the zip code area contains more than 20,000 people.
  3. For dates directly related to the individual, all elements of dates, except year (date of birth, admission date, discharge date, date of death).
  4. All ages over 89 or dates indicating such an age, except that you may have an aggregate category of individuals 90 and older.
  5. Telephone number
  6. Fax number
  7. Email address
  8. Social security number
  9. Medical record number
  10. Health plan number
  11. Account numbers
  12. Certificate or license numbers
  13. Vehicle identification/serial numbers, including license plate numbers
  14. Device identification/serial numbers
  15. Universal resource locators
  16. Internet protocol addresses
  17. Biometric identifiers
  18. Full face photographs and comparable images
  19. Any other unique identifying number, characteristic or code.

RE-IDENTIFICATION OF DE-IDENTIFIED DATA

A code or other means of re-identifying de-identified data may be assigned, provided that the code is not derived from or related to information about the individual or is not otherwise capable of being used to identify the individual. The code or other means of re-identifying de-identified data will not be disclosed to the researcher.

If information that was once de-identified is re-identified, it is once again PHI and will not be used or disclosed in violation of any policy, procedure or state or federal law applicable to PHI.

Document Feedback

Did this document successfully answer your questions?

Additional comments: (2000 character limit)

Email Address: (so we can respond to your questions)

© 2009 Regents of the University of Minnesota. All rights reserved.
The University of Minnesota is an equal opportunity educator and employer.
Last modified on September 22, 2009