De-identified Health Information

Health information that does not identify an individual and where there is no reasonable basis to believe that the information can be used to identify an individual. There are two ways to de-identify information, either 1) a formal determination by a qualified statistician; or 2) the removal of specified identifiers of the individual and of the individual's relatives, household members, and employees is required, and is adequate only if the covered entity has no actual knowledge that the remaining information could be used to identify the individual. De-identified data may be used or disclosed without restriction.