====== Protected Health Information (PHI) ======

For data going to [[:data:CRC]], not HIPAA compliant. Don't include PHI in the raw data.

===== Date of Birth (DOB) =====

[[https://www.hipaaguide.net/what-is-considered-as-phi-under-hipaa/|HIPAA considers birthday's to be PHI]]. However, birth year is not. If some birth information will be useful, consider recording birthday with birth year only.

<WRAP tip> ''1986-07-01'' can be recorded as ''1986-01-01'' to included some birth information without storing PHI in the DICOM header. </WRAP>

<WRAP round box center>
Related to the question of whether a date of birth is Protected Health Information, is whether a year of birth is PHI. In this case, the year of birth itself does not reveal sufficient information about an individual to identify them. However, under the de-identification standard, all years of birth that indicate an individual is aged over 89 must be removed from a designated record set.
</WRAP>