Covered entities can include the very first three digits for the ZIP rule if, in line with the present publicly available information through the Bureau regarding the Census: (1) The unit that is geographic by combining all ZIP codes with the exact same three initial digits contains significantly more than 20,000 people; or (2) the first three digits of a ZIP code for several such geographical devices containing 20,000 or less individuals is changed to 000. Which means the original three digits of ZIP codes could be incorporated into de-identified information except whenever ZIP codes support the initial three digits listed in the Table below. The first three digits must be listed as 000 in those cases.
OCR published a last guideline on August 14, 2002, that modified specific criteria within the Privacy Rule. The preamble for this last guideline identified the first three digits of ZIP codes, or ZIP rule tabulation areas (ZCTAs), that have to alter to 000 for launch. 67 FR 53182, 53233-53234 (Aug. 14, 2002)).
Using 2000 Census information, listed here three-digit ZCTAs have a population of 20,000 or less individuals. To make a de-identified data set utilising the safe harbor method, all documents with three-digit ZIP codes corresponding to these three-digit ZCTAs will need to have the ZIP rule changed to 000. Covered entities must not, but, are based upon this listing or even the one based in the August 14, 2002 regulation if more data that are current been posted.