HIPAA identifiers

HIPAA Protected Health Information is considered identifiable if any of the following identifiers are included:

  1. Name
  2. Geographic subdivisions smaller than a state.
  3. All elements of dates (except year) for dates that are directly related to an individual; and all ages over 89 and all elements of dates (including year) indicative of such age
  4. Telephone numbers
  5. Fax numbers
  6. Email addresses
  7. Social security numbers
  8. Medical record numbers
  9. Health plan numbers
  10. Account numbers
  11. Certificate or license numbers
  12. Vehicle identification/serial numbers, including license plate numbers
  13. Device identification/serial numbers
  14. Universal Resource Locators (URLs)
  15. Internet protocol (IP) addresses
  16. Biometric identifiers, including finger and voice prints
  17. Full face photographs and comparable images
  18. Any other unique identifying number, characteristic, or code

For details and exceptions, see Research A-Z webpage Protected Health Information, heading "HIPAA identifiers."