{"page":"/blog/hipaa-de-identification-ad-audiences","modified":"2026-11-10","license":"https://creativecommons.org/licenses/by/4.0/","columns":["Option","What it gives the business","What stays open","How hard it is to reverse"],"rows":[["Aggregate reporting without keys","Shares totals that can inform spending and delivery.","Small cells or repeated totals can still expose individuals.","Reports can change without migrating identity keys."],["Expert-assessed cohorts for named recipients","Gives a specified recipient cohort signals under documented assumptions.","The report’s scope, controls and future data changes matter.","A change to fields or recipient can require another assessment."],["Release treated as protected health information (PHI)","Keeps the health-data framework in the design discussion.","Recipient roles, agreements and authorizations remain separate questions.","Existing recipients and any stored data need closeout plans."]],"sourceUrls":[[],[],[]]}