HIPAA Glossary · Data & information types
Limited data set
PHI stripped of most direct identifiers but retaining elements like dates and geographic detail, usable under a data use agreement.
Context
Narrower than full PHI, broader than de-identified. §164.514(e) lists what is stripped (names, addresses other than town/state/zip, phone, fax, email, SSN, medical record numbers, account numbers, licence numbers, URLs, IPs, biometrics, photos) and what may remain (dates, geographic data at the town/state/zip level). Usable for research, public health, or operations under a data use agreement.
Related terms
- Data use agreement — The required contract governing a recipient's use of a limited data set.
- De-identification — Removing identifiers so information is no longer PHI and falls outside HIPAA. Two accepted methods: Expert Determination and Safe Harbor.
Where this fits
This is one of 50+ terms in the HIPAA Glossary. For how HIPAA is structured end-to-end, see the Security Rule guide and the Privacy Rule guide.