HIPAA Protected Health Information is considered identifiable if any of the following identifiers are included:
- Name
- Geographic subdivisions smaller than a state.
- All elements of dates (except year) for dates that are directly related to an individual; and all ages over 89 and all elements of dates (including year) indicative of such age
- Telephone numbers
- Fax numbers
- Email addresses
- Social security numbers
- Medical record numbers
- Health plan numbers
- Account numbers
- Certificate or license numbers
- Vehicle identification/serial numbers, including license plate numbers
- Device identification/serial numbers
- Universal Resource Locators (URLs)
- Internet protocol (IP) addresses
- Biometric identifiers, including finger and voice prints
- Full face photographs and comparable images
- Any other unique identifying number, characteristic, or code
For details and exceptions, see Research A-Z webpage Protected Health Information, heading "HIPAA identifiers."
