HIPAA (Health Insurance Portability and Accountability Act)

HIPAA Privacy Training for Contractors and Volunteers

III. Responsibilities/Releasing Protected Health Information (PHI)

Special Requirements for Releasing PHI

  • HIPAA requires the removal of PHI that can be used to identify an individual before it is released to the public.

  • HIPAA de-identification requirements are stricter than the Medicaid de-identification requirements.
    For example, under HIPAA, PHI may not be released by ZIP code if the total population for the ZIP code is less than 20,000.

  • Consult with legal staff or the HHSC Privacy Officer on de-identification or special data release requests.

Previous | Home | Next

© Copyright 2016-2022. Texas Health & Human Services Commission. All rights reserved.