HIPAA Glossary · Data & information types
Expert Determination
The alternative de-identification method: a qualified statistician determines the re-identification risk is very small and documents the analysis.
Context
Used when Safe Harbor would strip too much utility — for research, analytics, machine learning. The expert applies statistical and scientific principles and documents the methods and results. The documentation itself is the compliance artefact; a verbal reassurance from a data science team is not Expert Determination.
Related terms
- De-identification — Removing identifiers so information is no longer PHI and falls outside HIPAA. Two accepted methods: Expert Determination and Safe Harbor.
- Safe Harbor (de-identification) — The de-identification method that removes 18 specified categories of identifiers, with no actual knowledge the remainder could identify the individual.
Where this fits
This is one of 50+ terms in the HIPAA Glossary. For how HIPAA is structured end-to-end, see the Security Rule guide and the Privacy Rule guide.