HIPAA recognizes two methods for de-identifying protected health information (PHI): Safe Harbor, which requires removing specified identifiers and having no actual knowledge that the remaining information could identify someone, and Expert Determination, which requires a qualified expert to conclude that identification risk is very small for an anticipated recipient and document the analysis. Neither method guarantees zero re-identification risk; the right choice depends on the data, its intended use, and the disclosure context.
What is the difference between Safe Harbor and Expert Determination?
Both methods are set out in the HIPAA Privacy Rule at 45 CFR § 164.514(b). Safe Harbor is a defined set of identifier-removal rules plus a separate no-actual-knowledge condition. Expert Determination is a contextual risk assessment based on generally accepted statistical and scientific principles and methods. The expert must document the methods and results that support the conclusion. See the regulation text.
| Decision point | Safe Harbor | Expert Determination |
|---|---|---|
| Legal test | Remove the listed identifiers concerning the individual and specified relatives, household members, or employers; the covered entity must also lack actual knowledge that the remaining information could identify the individual. | An appropriately knowledgeable and experienced person determines that the risk is very small for an anticipated recipient, considering reasonably available information, and documents the methods and results. |
| Flexibility | Prescriptive handling rules apply, including for dates, ages over 89, and geography. | Methods and mitigations can be tailored to the data, recipient, and disclosure environment; the Rule does not prescribe one technique. |
| Data utility | Some fields may need to be removed or generalized to meet categorical rules. | Experts and data managers can iterate on mitigations to balance utility and disclosure risk, but utility does not replace the legal risk standard. |
| Expertise and records | Requires correct removal of listed identifiers and attention to actual knowledge. | Requires appropriate expert qualifications and a written record of the analysis methods and results, available to OCR on request. |
| Residual risk | Some possibility of re-identification remains. | Risk depends on context and may change as technology and outside information change; the Rule specifies no universal expiration interval. |
How Safe Harbor works
Safe Harbor requires removal of 18 categories of identifiers listed by HHS, where they relate to the individual or specified relatives, household members, or employers. The categories include names; most geographic subdivisions smaller than a state; most date elements other than year; ages over 89; telephone and fax numbers; email addresses; Social Security numbers; medical-record, health-plan, and account numbers; certificate and license numbers; vehicle and device identifiers; URLs and IP addresses; biometric identifiers; full-face images; and other unique identifying numbers, characteristics, or codes, subject to the Rule’s provision for re-identification codes. The HHS Summary of the HIPAA Privacy Rule and the regulation provide the full list and qualifications.
Dates, ages, and ZIP codes
- Dates: Remove date elements directly related to an individual other than the year.
- Ages over 89: Group the age and date elements indicative of that age as “90 or older.”
- Three-digit ZIP prefixes: A prefix may be retained only when the combined geographic area represented by those ZIP codes has more than 20,000 people under current publicly available Census data. If it does not, replace the three digits with 000.
These ZIP-code population and date rules are specific regulatory requirements, not estimates of re-identification probability.
Recommended Free Tools
#1 Best Overall
- Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
- Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
- Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
- Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
- 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.
Identifiers in free text and actual knowledge
The identifier rules apply wherever identifying information appears, not only in standardized database fields. Narrative notes and other free text must also be reviewed for recognizable identifiers. Safe Harbor also has a separate actual-knowledge condition: removing the listed fields is not enough if the covered entity knows that remaining information could identify someone, alone or with other information. HHS gives the example of a distinctive occupation that, combined with other facts, could point to an individual. See HHS guidance on de-identification.
How Expert Determination works
Under Expert Determination, a person with appropriate knowledge of and experience with generally accepted statistical and scientific principles and methods assesses whether the information could identify an individual, alone or with reasonably available information, in the context of an anticipated recipient. The regulation’s test is that “the risk is very small” that the anticipated recipient could identify a subject. The Rule does not mandate a particular statistical technique or a universal numerical risk threshold.
Rank #2
- 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
- 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
- Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
- 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
- What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.
Who can serve as the expert?
HHS says there is no specific required degree or certification program. Relevant professional experience and academic or other training may be considered, including actual experience with de-identification methods. The expert must have the appropriate knowledge and experience for the assessment being made.
What the assessment and documentation cover
The assessment considers the dataset, the anticipated recipient, the disclosure environment, and reasonably available information that could be combined with the dataset. The regulation requires documentation of the methods and results that justify the determination. HHS states that there is “no explicit numerical level of identification risk” that universally meets the “very small” standard. A number chosen in one assessment should therefore not be treated as a HIPAA-wide safe harbor for other data or recipients.
Rank #3
- Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
- Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
- Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
- Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
- What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.
Why an assessment may be iterative
A typical process is to assess recipient and data risks, propose statistical or scientific mitigations, apply them with data managers, and reassess the resulting information. The expert and data team may repeat those steps to reduce disclosure risk while retaining useful detail. Utility helps guide choices among mitigations, but a useful dataset is not thereby legally de-identified; the required very-small-risk conclusion still has to be supported.
Which method should an organization use?
HIPAA permits either method; it does not require every organization to use Safe Harbor or to obtain an expert determination. The practical choice turns on whether the prescriptive rules can be followed without removing or generalizing detail needed for the intended use, and whether a contextual expert assessment is appropriate and supportable.
Rank #4
- Dual Converters, Infinite Potential：Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
- Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
- Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
- Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
- Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft
- Consider Safe Harbor when the data can meet the listed identifier-removal rules, including the date, age, and geography requirements, and the covered entity has no actual knowledge that the residual information could identify a person.
- Consider Expert Determination when a recipient-specific, scientifically supported assessment can address identification risks while evaluating which mitigations preserve needed data utility.
- For either approach, assess the information in its actual disclosure context. A method that works for one dataset or recipient does not automatically establish the same result for another.
Re-identification codes and residual risk
The Rule permits a covered entity to assign a code that allows later re-identification only when regulatory conditions are met. Among them, the code must not be derived from or related to information about the individual, and it must not otherwise be translatable to identify that person; the mechanism for re-identification must be protected as specified by the Rule. HHS also explains that cryptographic hashes may be considered under Expert Determination when keys are not disclosed to recipients. A hash is not automatically safe simply because it is a hash. See the regulation and HHS guidance.
HHS recognizes that properly de-identified information can still carry some possibility of re-identification. Once information is de-identified under the Privacy Rule, it is no longer PHI under that Rule, but the residual risk is not zero. A data use agreement may add protections in some settings; it does not substitute for meeting Expert Determination’s requirements.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Best Value
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
Does an Expert Determination expire?
The Privacy Rule does not explicitly require an expiration date for an expert determination. HHS notes that technology, social conditions, and available information change over time, so some practitioners use time-limited certifications based on expected changes. The Rule sets no standard renewal period; any review interval should reflect the data, recipient, and anticipated changes rather than an assumed HIPAA-wide schedule.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
