Question
Can I license data if I am HIPAA-covered?
By SourceX Editorial · Updated
Short answer
Only de-identified data, or data shared with patient authorization. HIPAA allows de-identification by removing 18 identifiers (Safe Harbor) or through an expert's determination. Business associate agreements may add limits.
Part of: How licensing works
Explanation#
Check BAAs for restrictions on de-identifying and using data.
State health privacy laws may also apply.
Rights and privacy#
- Confirm customer, vendor and employee agreements allow the use
- Remove or de-identify personal details before anything leaves the company
- Approve the final dataset and permitted uses in writing
How licensing works#
A business describes its data, buyer demand is assessed, scope and permitted use are proposed, the data is prepared and de-identified, an agreement is signed, and the approved dataset is delivered. See data licensing for detail.
Related questions
Sources
General information, not legal advice. Editorial policy.
Related resources
- SolutionData partnerships between businesses and AI developers
- IndustryBPO & contact centers data
- IndustryRecruiting & staffing data
- GlossaryData processing agreement
- QuestionDo AI companies buy private business data?
- QuestionIs selling company data legal?
- InsightIs it safe to license company data for AI training?
- InsightHow is company data anonymized before AI training?
- InsightHow to remove sensitive details from business data for AI training
- SolutionTurn the data your company already creates into a licensing asset
- DataSales and CRM data
- DataLegal and contract data
See if your company qualifies
A short company assessment. No data uploads are needed.