Privacy Protection under HIPAA:
De-identification When the Safe Harbor is Too Restrictive
Join us to hear more about establishing privacy protection under the Health Insurance Portability and Accountability Act (HIPAA) when some potentially “identifying fields” remain in health records.
This webinar discusses conditions under which health records are considered not “individually identifiable health information” and thus not subject to the requirements that relate to Protected Health Information. HIPAA’s Privacy Rule allows health records to be de-identified by stripping specific identifying fields (names, addresses, account numbers, medical procedure dates, etc.). However, oftentimes businesses need to retain more information than allowed under this “Safe Harbor” method. The Privacy Rule permits alternative ways to de-identify health records, provided a statistician or similarly qualified individual determines that the risk is very small that the information can be used to identify patients.
The webinar covers how statisticians evaluate identification risks and how this assists clients with minimizing those risks. Topics include:
- The types of issues statisticians consider to determine whether health information can identify individuals: the roles of anticipated recipients of the data, the purposes for which they will use the data, related external data sources that may be available, the comprehensiveness of data fields, etc.
- Strategies for minimizing identification risks: “rank-swapping” of extreme values, automated “scrubbing” of images, and encryption-like “hashing” methods to mask patient identities to the company while preserving identifiability for business partners.
About the Presenter:
Dr. Daniel S. Levy, National Managing Director of Advanced Analytical Consulting Group, assists attorneys with statistical and analytical aspects of healthcare litigation, including False Claims Act (FCA) cases. Prior to joining Advanced Analytical Consulting Group (AACG), he was the Global Leader of Economic and Statistical Consulting for Deloitte Forensic and Dispute Services and Arthur Andersen’s Business Consulting. He has testified for, and provided evidence and research for the Department of Labor, corporate defendants, various state and federal courts and commissions and insurance commissions.
Prior to founding Advanced Analytical Consulting Group, Dr. Levy was the National Managing Principal of Economic and Statistical Consulting for Deloitte Financial Advisory Services LLP. He also served as the Global Director of Economic Consulting for Arthur Andersen’s Value Solutions practice. He has also held research and consulting positions at Charles River Associates, The RAND Corporation, Needham, Harper Worldwide Advertising, SPSS Inc. and The University of Chicago Computation Center. Dr. Levy received a PhD and an AB with Special Honors in Economics from The University of Chicago.
WHEN IT HAS TO BE RIGHT