To leverage PHI for secondary purposes, an understanding of the different de-identification mechanisms is required. Under the HIPAA, there are two methods for de-identification: Safe Harbor and the Statistical Method (otherwise known as Expert Determination). While both are under HIPAA’s privacy rule, they are not the same. Understanding the difference between these two methods will ensure success when unlocking health data.