Post

PHI, the 18 Identifiers and the Minimum Necessary Standard

What counts as protected health information, the 18 HIPAA identifiers, and how 'minimum necessary' shapes system and API design.

PHI, the 18 Identifiers and the Minimum Necessary Standard

Coming soon. This post is a placeholder in the US Healthcare learning path. The outline below is what it will cover.

What this post will cover

  • PHI vs ePHI
  • The 18 identifiers
  • Permitted uses: treatment, payment and operations (TPO)
  • The minimum necessary standard
  • Patient rights: access, amendment and accounting of disclosures
  • Design implications: data minimisation, access control and audit logs

Further watching

From the HealthTech Decoded channel:

Where this fits

Level 2 · Core workflows › HIPAA, privacy and regulation

This post is licensed under CC BY 4.0 by the author.