The department may use PHI to create de-identified information for purposes such as research, quality control and reporting to various federal and state agencies. Health information that does not identify an individual is not individually identifiable health information as defined in HIPAA. A person with appropriate knowledge of, and experience with, generally accepted statistical and scientific principles and methods for rendering information not individually identifiable applies such principles and methods to determine if the information, in combination with other information could identify the individual to the anticipated recipient. The method and results of the analysis are documented.
N.M. Admin. Code § 8.8.5.13