Covered entities can sometimes include the initial three digits regarding the ZIP rule if, in line with the present publicly available information from the Bureau for the Census: (1) The geographical product created by combining all ZIP codes with the exact same three initial digits contains significantly more than 20,000 individuals; or (2) the original three digits of a ZIP rule for several such geographical devices containing 20,000 or less individuals is changed to 000. Which means the original three digits of ZIP codes might be incorporated into de-identified information except if the ZIP codes support the initial three digits placed in the Table below. In those situations, the initial three digits needs to be detailed as 000.
OCR published a rule that is final August 14, 2002, that modified certain criteria within the Privacy Rule. The preamble for this rule that is final the first three digits of ZIP codes, or ZIP code tabulation areas (ZCTAs), that has to switch to 000 for launch. 67 FR 53182, 53233-53234 (Aug. 14, 2002)).
Using 2000 Census information, the after ZCTAs that is three-digit have populace of 20,000 or less people. To create a de-identified data set using the safe harbor technique, all documents with three-digit ZIP codes corresponding to these three-digit ZCTAs will need to have the ZIP code changed to 000. Covered entities must not, but, are based upon this listing or the one found in the August 14, 2002 regulation if more present information has been posted.