Under HIPAA, what is the primary significance of de-identifying health information?
-
A
De-identified information can be sold to any party for any purpose without restriction
-
B
De-identified information is no longer PHI and is not subject to HIPAA's privacy protections
-
C
De-identified information requires less encryption but still needs a BAA for sharing
-
D
De-identification protects organizations from all HIPAA penalties