HIPAA Compliance

Compile patient information is de-identified (statistically anonymized) in accordance with HIPAA expert determination outlined in Section 164.514(b)(1) of Title 45 of the Code of Federal Regulations. Additionally, “de-identified” refers to data that “cannot reasonably identify, relate to, describe, be capable of being associated with, or be linked, directly or indirectly, to a particular customer.” Cal. Civ. Code § 1798.140(h).


Based on HIPAA guidelines, please adhere to the following restrictions:

• Compile de-identified patient data is not linkable with non-Compile patient data without an expert determination privacy certification.
• Guidelines for reporting data at the patient-level:
• Counts for HCP’s and HCO’s can be reported.
• Any aggregation at a geography level must be for ZIP3, CBSAs or MSAs with ≥20,000 population size.
• For all patients >89 years, year of birth is coded such that de-identified patients can only be calculated up to 90 years old.