Confidentiality, Privacy and Security

Using de-identified records for case studies

  • 1.  Using de-identified records for case studies

    Posted 17 days ago
    Hello everyone,

    We received a question from an Imaging Director, regarding whether a staff member (who is also an instructor at a university), may utilize de-identified pictures and de-identified medical histories in case studies for educational purposes. The staff member would like to present these pictures and histories to the students.

    I understand that the OCR provides two approved methods for de-identifying - the Expert Determination method, and the Safe Harbor method.

    How do your facilities accomplish de-identification for educational purposes?

    Thank you for your assistance.

    ------------------------------
    Marianne Mao
    Privacy Specialist
    Memorial Healthcare System
    ------------------------------


  • 2.  RE: Using de-identified records for case studies

    Posted 17 days ago
    I would think that you would have an internal Review Board (IRB) committee that would give guidance on de-identifying your PHI and how it can be used in studies and other things?

    If you have an IRB I would start there.



    --
    Thanks Kris

    Kris Lundell MBA,  CIPP/US, CiPT, CHP, CHPS, HCISPP
    Privacy and Security Consultants LLC





  • 3.  RE: Using de-identified records for case studies

    Posted 17 days ago
    If you do not have an IRB, then administration.  You would need reasonable assurances that the images and reports are de-identified which can be labor intensive.  Unique cases in themselves may be individually identifiable in small communities.  I think this is why so many organizations stopped doing this.

    ------------------------------
    Nancy Davis, MS, RHIA, CHPS
    Director of Compliance & Safety
    Door County Medical Center
    ------------------------------



  • 4.  RE: Using de-identified records for case studies

    Posted 14 days ago
    In the past (as the priv & sec officer), I was asked to review these types of requests and insure they were completely de-identified.  I also logged the request for internal tracking.

    ------------------------------
    DeAnn Tucker MHA, RHIA, CHPS, CCS
    Senior Manager | Coker Group
    ------------------------------