3 ms·
IP addresses are also considered PHI under HIPAA. This is new to the GDPR.
by killjoywashere 8y ago
IP addresses are also considered PHI under HIPAA. This is new to the GDPR.
- zaroth 8y agoIP addresses are not themselves PHI, but the presence of IP addresses is considered to make PHI “individually identifiable”. IP addresses must be removed when you are de-identifing PHI. You also, by the way, must remove any geographic information more specific than a state, such as ZIP codes. So it doesn’t say much to include IP addresses in the deidentification list.