A nurse practitioner is conducting a chart review study with de-identified data. Which statement about HIPAA compliance is most accurate?
-
A
De-identified data is not considered protected health information under HIPAA
-
B
IRB approval is not required when data is de-identified
-
C
De-identification requires removal of only the patient's name and date of birth
-
D
HIPAA does not apply to retrospective chart reviews