HIPAA allows for the use of de-identified data without restrictions. De-identified data is information that cannot be used to identify an individual. There are two methods to de-identify data under HIPAA: the Expert Determination Method and the Safe Harbor Method. The Safe Harbor Method involves removing 18 types of identifiers such as names, geographic information, and social security numbers.