Table 1: Essential Metadata that must be removed from images anonymized to the HIPAA standard.
|
1. Names |
|
2. Geographic subdivisions smaller than a state, including address, city, county, precinct, ZIP, and their equivalent geocodes, except for initial three digits of ZIP code |
|
3. All elements of dates (except year) for dates directly related to an individual, including birth date, admission date, discharge date, date of death; and all ages over 89 and all elements of dates (including year) indicative of such age, except that such ages and elements may be aggregated into a single category of age 90 or older |
|
4. Telephone numbers |
|
5. Fax numbers |
|
6. E-mail addresses |
|
7. Social Security numbers |
|
8. Medical record numbers |
|
9. Health plan beneficiary numbers |
|
10. Account numbers |
|
11. Certificate/license numbers |
|
12. Vehicle identifiers and serial numbers, including license plate numbers |
|
13. Device identifiers and serial numbers |
|
14. Web universal locators (URLs) |
|
15. IP address numbers |
|
16. Biometric identifiers, including fingerprints and voice prints |
|
17. Full-face photographic images and any comparable images |
|
18. Other unique identifying numbers, characteristics or codes |