{ "name": "De-identification standards, what each requires", "title": "De-identification standards, what each requires", "kind": "terms-board", "url": "https://piiredactiontool.com/datasets/piiredactiontool-rules-from-primary-source/", "csv": "https://piiredactiontool.com/datasets/piiredactiontool-rules-from-primary-source.csv", "markdown": "https://piiredactiontool.com/datasets/piiredactiontool-rules-from-primary-source/index.md", "computed_at": "2026-10-08", "license": "https://piiredactiontool.com/terms", "headline": "6 de-identification and redaction standards were read for what they require removed or transformed, each answer quoted from the standard's own text, read 8 October 2026.", "quotes": [ "6 de-identification and redaction standards were read for what they require removed or transformed, each answer quoted from the standard's own text, read 8 October 2026.", "The method it accepts, by standard: several methods, by context 2 of 6, not stated 1 of 6, pseudonymisation with the key kept separately 1 of 6, reasonable measures so the data cannot be linked to a person 1 of 6, removing the listed identifiers 1 of 6 (6 standards, read 8 October 2026).", "What must go, in its words, by standard: stated 6 of 6 (6 standards, read 8 October 2026).", "The re-identification safeguard, by standard: stated 6 of 6 (6 standards, read 8 October 2026).", "Where it applies, by standard: not stated 3 of 6, the United States 2 of 6, California 1 of 6 (6 standards, read 8 October 2026)." ], "citation": "\"De-identification standards, what each requires\", updated 2026-10-08, https://piiredactiontool.com/datasets/piiredactiontool-rules-from-primary-source/.", "national": { "n": 6, "unit": "standards", "documents": 7, "published_sources": 6, "named_sources": 11 }, "board": { "type": "clauses", "noun": { "one": "standard", "many": "standards" }, "document": { "one": "text", "many": "texts" }, "fields": [ { "id": "method", "label": "The method it accepts", "counts": { "reasonable-measures": 1, "not-stated": 1, "removal": 1, "pseudonymisation": 1, "several": 2 }, "values": [ { "value": "removal", "text": "removing the listed identifiers" }, { "value": "expert-determination", "text": "an expert's determination of low re-identification risk" }, { "value": "pseudonymisation", "text": "pseudonymisation with the key kept separately" }, { "value": "reasonable-measures", "text": "reasonable measures so the data cannot be linked to a person" }, { "value": "several", "text": "several methods, by context" } ] }, { "id": "identifiers", "label": "What must go, in its words", "counts": { "stated": 6 }, "values": [ { "value": "stated", "text": "stated" } ], "clause": true }, { "id": "safeguard", "label": "The re-identification safeguard", "counts": { "stated": 6 }, "values": [ { "value": "stated", "text": "stated" } ], "clause": true }, { "id": "jurisdiction", "label": "Where it applies", "counts": { "california": 1, "not-stated": 3, "us": 2 }, "values": [ { "value": "us", "text": "the United States" }, { "value": "california", "text": "California" }, { "value": "eu", "text": "the European Union" }, { "value": "uk", "text": "the United Kingdom" }, { "value": "international", "text": "an international standard" } ] } ], "lead": { "type": "count", "field": null, "value": null, "n": 6, "of": 6, "label": "Standards read" }, "vendors": [ { "name": "CCPA deidentified data (Civil Code 1798.140)", "answers": { "method": { "value": "reasonable-measures", "text": "reasonable measures so the data cannot be linked to a person", "documents": [ { "document": "California Civil Code 1798.140", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV§ionNum=1798.140", "value": "reasonable-measures", "quote": "Takes reasonable measures to ensure that the information cannot be associated with a consumer or household." } ] }, "identifiers": { "value": "stated", "text": "\"Deidentified\" means information that cannot reasonably be used to infer information…", "documents": [ { "document": "California Civil Code 1798.140", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV§ionNum=1798.140", "value": "stated", "quote": "\"Deidentified\" means information that cannot reasonably be used to infer information about, or otherwise be linked to, a particular consumer" } ] }, "safeguard": { "value": "stated", "text": "Publicly commits to maintain and use the information in deidentified form and not to…", "documents": [ { "document": "California Civil Code 1798.140", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV§ionNum=1798.140", "value": "stated", "quote": "Publicly commits to maintain and use the information in deidentified form and not to attempt to reidentify the information" } ] }, "jurisdiction": { "value": "california", "text": "California", "documents": [ { "document": "California Civil Code 1798.140", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV§ionNum=1798.140", "value": "california", "quote": "California Law >> >> Code Section" } ] } } }, { "name": "DPA 2018 s.171 (re-identification offence)", "answers": { "method": { "value": "not-stated", "text": "not stated", "documents": [ { "document": "Data Protection Act 2018 section 171", "url": "https://www.legislation.gov.uk/ukpga/2018/12/section/171", "value": "not-stated", "quote": "" } ] }, "identifiers": { "value": "stated", "text": "personal data is \"de-identified\" if it has been processed in such a manner that it can no…", "documents": [ { "document": "Data Protection Act 2018 section 171", "url": "https://www.legislation.gov.uk/ukpga/2018/12/section/171", "value": "stated", "quote": "personal data is \"de-identified\" if it has been processed in such a manner that it can no longer be attributed, without more, to a specific data subject;" } ] }, "safeguard": { "value": "stated", "text": "It is an offence for a person knowingly or recklessly to re-identify information that is…", "documents": [ { "document": "Data Protection Act 2018 section 171", "url": "https://www.legislation.gov.uk/ukpga/2018/12/section/171", "value": "stated", "quote": "It is an offence for a person knowingly or recklessly to re-identify information that is de-identified personal data without the consent of the controller responsible for de-identifying the personal data." } ] }, "jurisdiction": { "value": "not-stated", "text": "not stated", "documents": [ { "document": "Data Protection Act 2018 section 171", "url": "https://www.legislation.gov.uk/ukpga/2018/12/section/171", "value": "not-stated", "quote": "" } ] } } }, { "name": "FERPA de-identified records (34 CFR 99.31)", "answers": { "method": { "value": "removal", "text": "removing the listed identifiers", "documents": [ { "document": "34 CFR 99.31", "url": "https://www.ecfr.gov/current/title-34/subtitle-A/part-99/subpart-D/section-99.31", "value": "removal", "quote": "may release the records or information without the consent required by § 99.30 after the removal of all personally identifiable information" } ] }, "identifiers": { "value": "stated", "text": "after the removal of all personally identifiable information provided that the…", "documents": [ { "document": "34 CFR 99.31", "url": "https://www.ecfr.gov/current/title-34/subtitle-A/part-99/subpart-D/section-99.31", "value": "stated", "quote": "after the removal of all personally identifiable information provided that the educational agency or institution or other party has made a reasonable determination that a student's identity is not personally identifiable" } ] }, "safeguard": { "value": "stated", "text": "whether through single or multiple releases, and taking into account other reasonably…", "documents": [ { "document": "34 CFR 99.31", "url": "https://www.ecfr.gov/current/title-34/subtitle-A/part-99/subpart-D/section-99.31", "value": "stated", "quote": "whether through single or multiple releases, and taking into account other reasonably available information" } ] }, "jurisdiction": { "value": "not-stated", "text": "not stated", "documents": [ { "document": "34 CFR 99.31", "url": "https://www.ecfr.gov/current/title-34/subtitle-A/part-99/subpart-D/section-99.31", "value": "not-stated", "quote": "" } ] } } }, { "name": "GDPR pseudonymisation (Art 4(5), Recital 26)", "answers": { "method": { "value": "pseudonymisation", "text": "pseudonymisation with the key kept separately", "documents": [ { "document": "GDPR full text, EUR-Lex", "url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "value": "pseudonymisation", "quote": "provided that such additional information is kept separately and is subject to technical and organisational measures" } ] }, "identifiers": { "value": "stated", "text": "the personal data can no longer be attributed to a specific data subject without the use…", "documents": [ { "document": "GDPR full text, EUR-Lex", "url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "value": "stated", "quote": "the personal data can no longer be attributed to a specific data subject without the use of additional information" } ] }, "safeguard": { "value": "stated", "text": "Personal data which have undergone pseudonymisation, which could be attributed to a…", "documents": [ { "document": "GDPR full text, EUR-Lex", "url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "value": "stated", "quote": "Personal data which have undergone pseudonymisation, which could be attributed to a natural person by the use of additional information should be considered to be information on an identifiable natural person." } ] }, "jurisdiction": { "value": "not-stated", "text": "not stated", "documents": [ { "document": "GDPR full text, EUR-Lex", "url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "value": "not-stated", "quote": "" } ] } } }, { "name": "HIPAA de-identification standard (45 CFR 164.514)", "answers": { "method": { "value": "several", "text": "several methods, by context", "documents": [ { "document": "45 CFR 164.514", "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.514", "value": "several", "quote": "A person with appropriate knowledge of and experience with generally accepted statistical and scientific principles and methods for rendering information not individually identifiable" }, { "document": "HHS guidance on de-identification methods", "url": "https://www.hhs.gov/hipaa/for-professionals/special-topics/de-identification/index.html", "value": "several", "quote": "the two methods that can be used to satisfy the Privacy Rule's de-identification standard: Expert Determination and Safe Harbor" } ] }, "identifiers": { "value": "stated", "text": "The following identifiers of the individual or of relatives, employers, or household…", "documents": [ { "document": "45 CFR 164.514", "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.514", "value": "stated", "quote": "The following identifiers of the individual or of relatives, employers, or household members of the individual, are removed: (A) Names;" }, { "document": "HHS guidance on de-identification methods", "url": "https://www.hhs.gov/hipaa/for-professionals/special-topics/de-identification/index.html", "value": "not-stated", "quote": "" } ] }, "safeguard": { "value": "stated", "text": "The covered entity does not use or disclose the code or other means of record…", "documents": [ { "document": "45 CFR 164.514", "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.514", "value": "stated", "quote": "The covered entity does not use or disclose the code or other means of record identification for any other purpose, and does not disclose the mechanism for re-identification." }, { "document": "HHS guidance on de-identification methods", "url": "https://www.hhs.gov/hipaa/for-professionals/special-topics/de-identification/index.html", "value": "not-stated", "quote": "" } ] }, "jurisdiction": { "value": "us", "text": "the United States", "documents": [ { "document": "45 CFR 164.514", "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.514", "value": "not-stated", "quote": "" }, { "document": "HHS guidance on de-identification methods", "url": "https://www.hhs.gov/hipaa/for-professionals/special-topics/de-identification/index.html", "value": "us", "quote": "in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy Rule" } ] } } }, { "name": "NIST SP 800-188", "answers": { "method": { "value": "several", "text": "several methods, by context", "documents": [ { "document": "NIST SP 800-188 publication page", "url": "https://csrc.nist.gov/pubs/sp/800/188/final", "value": "several", "quote": "differential privacy; direct identifiers; Disclosure Review Board; k-anonymity; privacy; pseudonymization; quasi-identifiers" } ] }, "identifiers": { "value": "stated", "text": "De-identification is a general term for any process of removing the association between a…", "documents": [ { "document": "NIST SP 800-188 publication page", "url": "https://csrc.nist.gov/pubs/sp/800/188/final", "value": "stated", "quote": "De-identification is a general term for any process of removing the association between a set of identifying data and the data subject." } ] }, "safeguard": { "value": "stated", "text": "with the goal of preventing or limiting disclosure risks to individuals and establishments", "documents": [ { "document": "NIST SP 800-188 publication page", "url": "https://csrc.nist.gov/pubs/sp/800/188/final", "value": "stated", "quote": "with the goal of preventing or limiting disclosure risks to individuals and establishments" } ] }, "jurisdiction": { "value": "us", "text": "the United States", "documents": [ { "document": "NIST SP 800-188 publication page", "url": "https://csrc.nist.gov/pubs/sp/800/188/final", "value": "us", "quote": "An official website of the United States government" } ] } } } ] }, "subject_kind": "standard", "rows": [ { "subject": "CCPA deidentified data (Civil Code 1798.140)", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV§ionNum=1798.140", "document": "California Civil Code 1798.140", "question": "method", "answer": "reasonable-measures", "answer_text": "reasonable measures so the data cannot be linked to a person", "status": "stated", "retrieved_at": "2026-10-08", "quote": "Takes reasonable measures to ensure that the information cannot be associated with a consumer or household.", "text_sha256": "3e9f1acb719b80720889457d7390fa285a7e5337e4194d4025d7b31352467ef3" }, { "subject": "CCPA deidentified data (Civil Code 1798.140)", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV§ionNum=1798.140", "document": "California Civil Code 1798.140", "question": "identifiers", "answer": "stated", "answer_text": "\"Deidentified\" means information that cannot reasonably be used to infer information…", "status": "stated", "retrieved_at": "2026-10-08", "quote": "\"Deidentified\" means information that cannot reasonably be used to infer information about, or otherwise be linked to, a particular consumer", "text_sha256": "3e9f1acb719b80720889457d7390fa285a7e5337e4194d4025d7b31352467ef3" }, { "subject": "CCPA deidentified data (Civil Code 1798.140)", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV§ionNum=1798.140", "document": "California Civil Code 1798.140", "question": "safeguard", "answer": "stated", "answer_text": "Publicly commits to maintain and use the information in deidentified form and not to…", "status": "stated", "retrieved_at": "2026-10-08", "quote": "Publicly commits to maintain and use the information in deidentified form and not to attempt to reidentify the information", "text_sha256": "3e9f1acb719b80720889457d7390fa285a7e5337e4194d4025d7b31352467ef3" }, { "subject": "CCPA deidentified data (Civil Code 1798.140)", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV§ionNum=1798.140", "document": "California Civil Code 1798.140", "question": "jurisdiction", "answer": "california", "answer_text": "California", "status": "stated", "retrieved_at": "2026-10-08", "quote": "California Law >> >> Code Section", "text_sha256": "3e9f1acb719b80720889457d7390fa285a7e5337e4194d4025d7b31352467ef3" }, { "subject": "DPA 2018 s.171 (re-identification offence)", "url": "https://www.legislation.gov.uk/ukpga/2018/12/section/171", "document": "Data Protection Act 2018 section 171", "question": "method", "answer": "not-stated", "answer_text": "not stated", "status": "not-stated", "retrieved_at": "2026-10-08", "quote": "No answer on the text, which ran to 9,119 characters when read on 2026-10-08.", "text_sha256": "a7e877f7e83ba39460022e0379460a5c77bd80718e38c162c96bf702c6e3912c" }, { "subject": "DPA 2018 s.171 (re-identification offence)", "url": "https://www.legislation.gov.uk/ukpga/2018/12/section/171", "document": "Data Protection Act 2018 section 171", "question": "identifiers", "answer": "stated", "answer_text": "personal data is \"de-identified\" if it has been processed in such a manner that it can no…", "status": "stated", "retrieved_at": "2026-10-08", "quote": "personal data is \"de-identified\" if it has been processed in such a manner that it can no longer be attributed, without more, to a specific data subject;", "text_sha256": "a7e877f7e83ba39460022e0379460a5c77bd80718e38c162c96bf702c6e3912c" }, { "subject": "DPA 2018 s.171 (re-identification offence)", "url": "https://www.legislation.gov.uk/ukpga/2018/12/section/171", "document": "Data Protection Act 2018 section 171", "question": "safeguard", "answer": "stated", "answer_text": "It is an offence for a person knowingly or recklessly to re-identify information that is…", "status": "stated", "retrieved_at": "2026-10-08", "quote": "It is an offence for a person knowingly or recklessly to re-identify information that is de-identified personal data without the consent of the controller responsible for de-identifying the personal data.", "text_sha256": "a7e877f7e83ba39460022e0379460a5c77bd80718e38c162c96bf702c6e3912c" }, { "subject": "DPA 2018 s.171 (re-identification offence)", "url": "https://www.legislation.gov.uk/ukpga/2018/12/section/171", "document": "Data Protection Act 2018 section 171", "question": "jurisdiction", "answer": "not-stated", "answer_text": "not stated", "status": "not-stated", "retrieved_at": "2026-10-08", "quote": "No answer on the text, which ran to 9,119 characters when read on 2026-10-08.", "text_sha256": "a7e877f7e83ba39460022e0379460a5c77bd80718e38c162c96bf702c6e3912c" }, { "subject": "FERPA de-identified records (34 CFR 99.31)", "url": "https://www.ecfr.gov/current/title-34/subtitle-A/part-99/subpart-D/section-99.31", "document": "34 CFR 99.31", "question": "method", "answer": "removal", "answer_text": "removing the listed identifiers", "status": "stated", "retrieved_at": "2026-10-08", "quote": "may release the records or information without the consent required by § 99.30 after the removal of all personally identifiable information", "text_sha256": "450ff8cc9c6a2d91ce9c1b9e07d0fa90658efc954b103a7342bdacb934af68a0" }, { "subject": "FERPA de-identified records (34 CFR 99.31)", "url": "https://www.ecfr.gov/current/title-34/subtitle-A/part-99/subpart-D/section-99.31", "document": "34 CFR 99.31", "question": "identifiers", "answer": "stated", "answer_text": "after the removal of all personally identifiable information provided that the…", "status": "stated", "retrieved_at": "2026-10-08", "quote": "after the removal of all personally identifiable information provided that the educational agency or institution or other party has made a reasonable determination that a student's identity is not personally identifiable", "text_sha256": "450ff8cc9c6a2d91ce9c1b9e07d0fa90658efc954b103a7342bdacb934af68a0" }, { "subject": "FERPA de-identified records (34 CFR 99.31)", "url": "https://www.ecfr.gov/current/title-34/subtitle-A/part-99/subpart-D/section-99.31", "document": "34 CFR 99.31", "question": "safeguard", "answer": "stated", "answer_text": "whether through single or multiple releases, and taking into account other reasonably…", "status": "stated", "retrieved_at": "2026-10-08", "quote": "whether through single or multiple releases, and taking into account other reasonably available information", "text_sha256": "450ff8cc9c6a2d91ce9c1b9e07d0fa90658efc954b103a7342bdacb934af68a0" }, { "subject": "FERPA de-identified records (34 CFR 99.31)", "url": "https://www.ecfr.gov/current/title-34/subtitle-A/part-99/subpart-D/section-99.31", "document": "34 CFR 99.31", "question": "jurisdiction", "answer": "not-stated", "answer_text": "not stated", "status": "not-stated", "retrieved_at": "2026-10-08", "quote": "No answer on the text, which ran to 15,589 characters when read on 2026-10-08.", "text_sha256": "450ff8cc9c6a2d91ce9c1b9e07d0fa90658efc954b103a7342bdacb934af68a0" }, { "subject": "GDPR pseudonymisation (Art 4(5), Recital 26)", "url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "document": "GDPR full text, EUR-Lex", "question": "method", "answer": "pseudonymisation", "answer_text": "pseudonymisation with the key kept separately", "status": "stated", "retrieved_at": "2026-10-02", "quote": "provided that such additional information is kept separately and is subject to technical and organisational measures", "text_sha256": "7084da130829c0338631f5f77eb91df6b2de82d1217f06e33fffe87014839c36" }, { "subject": "GDPR pseudonymisation (Art 4(5), Recital 26)", "url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "document": "GDPR full text, EUR-Lex", "question": "identifiers", "answer": "stated", "answer_text": "the personal data can no longer be attributed to a specific data subject without the use…", "status": "stated", "retrieved_at": "2026-10-02", "quote": "the personal data can no longer be attributed to a specific data subject without the use of additional information", "text_sha256": "7084da130829c0338631f5f77eb91df6b2de82d1217f06e33fffe87014839c36" }, { "subject": "GDPR pseudonymisation (Art 4(5), Recital 26)", "url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "document": "GDPR full text, EUR-Lex", "question": "safeguard", "answer": "stated", "answer_text": "Personal data which have undergone pseudonymisation, which could be attributed to a…", "status": "stated", "retrieved_at": "2026-10-02", "quote": "Personal data which have undergone pseudonymisation, which could be attributed to a natural person by the use of additional information should be considered to be information on an identifiable natural person.", "text_sha256": "7084da130829c0338631f5f77eb91df6b2de82d1217f06e33fffe87014839c36" }, { "subject": "GDPR pseudonymisation (Art 4(5), Recital 26)", "url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "document": "GDPR full text, EUR-Lex", "question": "jurisdiction", "answer": "not-stated", "answer_text": "not stated", "status": "not-stated", "retrieved_at": "2026-10-02", "quote": "No answer on the text, which ran to 359,179 characters when read on 2026-10-02.", "text_sha256": "7084da130829c0338631f5f77eb91df6b2de82d1217f06e33fffe87014839c36" }, { "subject": "HIPAA de-identification standard (45 CFR 164.514)", "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.514", "document": "45 CFR 164.514", "question": "method", "answer": "several", "answer_text": "several methods, by context", "status": "stated", "retrieved_at": "2026-10-08", "quote": "A person with appropriate knowledge of and experience with generally accepted statistical and scientific principles and methods for rendering information not individually identifiable", "text_sha256": "aeab3b3088bf59a85c33236736ae95e9c3006a05a93f7ae321ff771092b8ef83" }, { "subject": "HIPAA de-identification standard (45 CFR 164.514)", "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.514", "document": "45 CFR 164.514", "question": "identifiers", "answer": "stated", "answer_text": "The following identifiers of the individual or of relatives, employers, or household…", "status": "stated", "retrieved_at": "2026-10-08", "quote": "The following identifiers of the individual or of relatives, employers, or household members of the individual, are removed: (A) Names;", "text_sha256": "aeab3b3088bf59a85c33236736ae95e9c3006a05a93f7ae321ff771092b8ef83" }, { "subject": "HIPAA de-identification standard (45 CFR 164.514)", "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.514", "document": "45 CFR 164.514", "question": "safeguard", "answer": "stated", "answer_text": "The covered entity does not use or disclose the code or other means of record…", "status": "stated", "retrieved_at": "2026-10-08", "quote": "The covered entity does not use or disclose the code or other means of record identification for any other purpose, and does not disclose the mechanism for re-identification.", "text_sha256": "aeab3b3088bf59a85c33236736ae95e9c3006a05a93f7ae321ff771092b8ef83" }, { "subject": "HIPAA de-identification standard (45 CFR 164.514)", "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.514", "document": "45 CFR 164.514", "question": "jurisdiction", "answer": "not-stated", "answer_text": "not stated", "status": "not-stated", "retrieved_at": "2026-10-08", "quote": "No answer on the text, which ran to 19,659 characters when read on 2026-10-08.", "text_sha256": "aeab3b3088bf59a85c33236736ae95e9c3006a05a93f7ae321ff771092b8ef83" }, { "subject": "HIPAA de-identification standard (45 CFR 164.514)", "url": "https://www.hhs.gov/hipaa/for-professionals/special-topics/de-identification/index.html", "document": "HHS guidance on de-identification methods", "question": "method", "answer": "several", "answer_text": "several methods, by context", "status": "stated", "retrieved_at": "2026-10-08", "quote": "the two methods that can be used to satisfy the Privacy Rule's de-identification standard: Expert Determination and Safe Harbor", "text_sha256": "2df345c13930248ae79dea73406191ac045a0e2113fb26bd85e58fb1c20d2498" }, { "subject": "HIPAA de-identification standard (45 CFR 164.514)", "url": "https://www.hhs.gov/hipaa/for-professionals/special-topics/de-identification/index.html", "document": "HHS guidance on de-identification methods", "question": "identifiers", "answer": "not-stated", "answer_text": "not stated", "status": "not-stated", "retrieved_at": "2026-10-08", "quote": "No answer on the text, which ran to 79,528 characters when read on 2026-10-08.", "text_sha256": "2df345c13930248ae79dea73406191ac045a0e2113fb26bd85e58fb1c20d2498" }, { "subject": "HIPAA de-identification standard (45 CFR 164.514)", "url": "https://www.hhs.gov/hipaa/for-professionals/special-topics/de-identification/index.html", "document": "HHS guidance on de-identification methods", "question": "safeguard", "answer": "not-stated", "answer_text": "not stated", "status": "not-stated", "retrieved_at": "2026-10-08", "quote": "No answer on the text, which ran to 79,528 characters when read on 2026-10-08.", "text_sha256": "2df345c13930248ae79dea73406191ac045a0e2113fb26bd85e58fb1c20d2498" }, { "subject": "HIPAA de-identification standard (45 CFR 164.514)", "url": "https://www.hhs.gov/hipaa/for-professionals/special-topics/de-identification/index.html", "document": "HHS guidance on de-identification methods", "question": "jurisdiction", "answer": "us", "answer_text": "the United States", "status": "stated", "retrieved_at": "2026-10-08", "quote": "in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy Rule", "text_sha256": "2df345c13930248ae79dea73406191ac045a0e2113fb26bd85e58fb1c20d2498" }, { "subject": "NIST SP 800-188", "url": "https://csrc.nist.gov/pubs/sp/800/188/final", "document": "NIST SP 800-188 publication page", "question": "method", "answer": "several", "answer_text": "several methods, by context", "status": "stated", "retrieved_at": "2026-10-08", "quote": "differential privacy; direct identifiers; Disclosure Review Board; k-anonymity; privacy; pseudonymization; quasi-identifiers", "text_sha256": "95b68ae8499fac2757dccd0bdaab7867a556c463be660776fbdc11ba6c75e306" }, { "subject": "NIST SP 800-188", "url": "https://csrc.nist.gov/pubs/sp/800/188/final", "document": "NIST SP 800-188 publication page", "question": "identifiers", "answer": "stated", "answer_text": "De-identification is a general term for any process of removing the association between a…", "status": "stated", "retrieved_at": "2026-10-08", "quote": "De-identification is a general term for any process of removing the association between a set of identifying data and the data subject.", "text_sha256": "95b68ae8499fac2757dccd0bdaab7867a556c463be660776fbdc11ba6c75e306" }, { "subject": "NIST SP 800-188", "url": "https://csrc.nist.gov/pubs/sp/800/188/final", "document": "NIST SP 800-188 publication page", "question": "safeguard", "answer": "stated", "answer_text": "with the goal of preventing or limiting disclosure risks to individuals and establishments", "status": "stated", "retrieved_at": "2026-10-08", "quote": "with the goal of preventing or limiting disclosure risks to individuals and establishments", "text_sha256": "95b68ae8499fac2757dccd0bdaab7867a556c463be660776fbdc11ba6c75e306" }, { "subject": "NIST SP 800-188", "url": "https://csrc.nist.gov/pubs/sp/800/188/final", "document": "NIST SP 800-188 publication page", "question": "jurisdiction", "answer": "us", "answer_text": "the United States", "status": "stated", "retrieved_at": "2026-10-08", "quote": "An official website of the United States government", "text_sha256": "95b68ae8499fac2757dccd0bdaab7867a556c463be660776fbdc11ba6c75e306" } ], "sources": [ { "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.514", "label": "45 CFR 164.514 - HIPAA de-identification standard (safe harbor, 18 identifiers)", "license": "quoted for reporting from the publisher's official texts and guidance", "class": "primary-government", "status": "read" }, { "url": "https://www.hhs.gov/hipaa/for-professionals/special-topics/de-identification/index.html", "label": "HHS, guidance on methods for de-identification of PHI", "license": "quoted for reporting from the publisher's official texts and guidance", "class": "primary-government", "status": "read" }, { "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV§ionNum=1798.140", "label": "California Civil Code 1798.140 (CCPA definitions incl. deidentified)", "license": "quoted for reporting from the publisher's official texts and guidance", "class": "primary-government", "status": "read" }, { "url": "https://www.ecfr.gov/current/title-34/subtitle-A/part-99/subpart-D/section-99.31", "label": "34 CFR 99.31 - FERPA disclosure of de-identified education records", "license": "quoted for reporting from the publisher's official texts and guidance", "class": "primary-government", "status": "read" }, { "url": "https://csrc.nist.gov/pubs/sp/800/188/final", "label": "NIST SP 800-188, De-Identifying Government Datasets", "license": "quoted for reporting from the publisher's official texts and guidance", "class": "primary-government", "status": "read" }, { "url": "https://nvlpubs.nist.gov/nistpubs/ir/2015/NIST.IR.8053.pdf", "label": "NIST IR 8053, De-Identification of Personal Information", "license": "quoted for reporting from the publisher's official texts and guidance", "class": "primary-government", "status": "not-terms", "why": "the read stored no text (an empty PDF read)" }, { "url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "label": "Regulation (EU) 2016/679 (GDPR), incl. Art. 4(5) pseudonymisation and Recital 26", "license": "quoted for reporting from the publisher's official texts and guidance", "class": "primary-government", "status": "read" }, { "url": "https://www.edpb.europa.eu/our-work-tools/documents/public-consultations/2025/guidelines-012025-pseudonymisation_en", "label": "EDPB Guidelines 01/2025 on pseudonymisation", "license": "quoted for reporting from the publisher's official texts and guidance", "class": "primary-government", "status": "not-terms", "why": "a public consultation feedback list; the guideline text is not on the page" }, { "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/data-sharing/anonymisation/", "label": "ICO, anonymisation guidance (under review after the Data (Use and Access) Act)", "license": "quoted for reporting from the publisher's official texts and guidance", "class": "primary-government", "status": "not-terms", "why": "an index page of the ICO's guidance; the guidance text is on sub-pages, and it says it is under review" }, { "url": "https://www.legislation.gov.uk/ukpga/2018/12/section/171", "label": "Data Protection Act 2018 s.171 - offence of re-identifying de-identified personal data", "license": "quoted for reporting from the publisher's official texts and guidance", "class": "primary-government", "status": "read" }, { "url": "https://www.iso.org/standard/69373.html", "label": "ISO/IEC 20889:2018, de-identification terminology and techniques", "license": "quoted for reporting from the publisher's official texts and guidance", "class": "secondary", "status": "not-terms", "why": "the charter admits it for: the standard's title, edition and technique classification only; the text is paywalled and never quoted" } ], "methodology": "Each standard's own official texts and guidance were read through estate-fetch and stored whole (sha256 on every row). For every text, four questions were answered from its own words: the method it accepts, what must go, in its words, the re-identification safeguard, where it applies. Every stated answer carries the sentence it rests on, checked against the stored text; 'not stated' means the text read does not address the question. A standard with several texts reads 'varies' where they disagree. 6 standards, 7 texts.", "embed": "
6 de-identification and redaction standards were read for what they require removed or transformed, each answer quoted from the standard's own text, read 8 October 2026.
De-identification standards, what each requires, piiredactiontool.com
" }