Covered entities can include the very first three digits associated with ZIP code if, in accordance with the present publicly available information through the Bureau associated with Census: (1) The geographical device created by combining all ZIP codes with the exact same three initial digits contains a lot more than 20,000 people; or (2) the first three digits of a ZIP rule for several such geographical devices containing 20,000 or less individuals is changed to 000. Which means the first three digits of ZIP codes might be a part of de-identified information except once the ZIP codes support the initial three digits placed in the dining dining dining Table below. The first three digits must be listed as 000 in those cases.
OCR published a last guideline on August 14, 2002, that modified specific criteria when you look at the Privacy Rule. The preamble to the final guideline identified the first three digits of ZIP codes, or ZIP rule tabulation areas (ZCTAs), that have to change to 000 for launch. 67 FR 53182, 53233-53234 (Aug. 14, 2002)).
Using 2000 Census information, the after ZCTAs that is three-digit have populace of 20,000 or less people. To create a de-identified data set utilising the safe harbor technique, all documents with three-digit ZIP codes corresponding to these three-digit ZCTAs will need to have the ZIP rule changed to 000. Covered entities must not, nonetheless, are based upon this listing or the one based in the August 14, 2002 regulation if more data that are current been posted.