HIPAA Privacy Manual - American Academy of Pediatrics

Monitor organization compliance with privacy policies including periodic privacy risk assessments. ... *Entire zip code must be removed if the geographic unit formed by combining all zip codes with the same three initial digits has a population of = 20,000 people; otherwise only the last two digits must be removed. ... without the express ... ................
................