HIPAA Safe Harbor De-identification Validation

formatcritical

Validates that data has been properly de-identified per the HIPAA Safe Harbor method. Checks that the 18 HIPAA identifiers are removed or generalized: zip codes must be truncated to 3 digits (or masked if population <20,000), dates must be generalized to year only, and ages over 89 must be aggregated to a single category (90+). This rule helps ensure compliance with the Safe Harbor de-identification standard.

v1.0.0by dqhub232 downloads4.8 (16)

phisecuritydeidentificationanonymizationhipaahealthcarecompliancesafe-harbor

Try This Rule

Parameters

column_namestringrequired

The column containing email addresses

thresholdfloatdefault: 0.99

Minimum fraction of valid emails (0.0 to 1.0)

Compliance Mapping

HIPAA45 CFR 164.514(b)(2)

HIPAA45 CFR 164.514(b)(2)(i)

Install

soda

checks for {{table_name}}:
  - invalid_percent({{column_name}}) < {{(1 - threshold) * 100}}:
      valid regex: '^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$'

dbt

{% test valid_email(model, column_name) %}
select {{ column_name }}
from {{ model }}
where {{ column_name }} not regexp '^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\\.[a-zA-Z]{2,}$'
{% endtest %}

sql

SELECT COUNT(*) as total,
  SUM(CASE WHEN {{column_name}} REGEXP
    '^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\\.[a-zA-Z]{2,}$'
    THEN 1 ELSE 0 END) as valid
FROM {{table_name}}

Great Expectations

{
  "expectation_type": "expect_column_values_to_match_regex",
  "kwargs": {
    "column": "{{column_name}}",
    "regex": "^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\\.[a-zA-Z]{2,}$",
    "mostly": {{threshold}}
  }
}

spark

from pyspark.sql.functions import col
pattern = r'^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$'
invalid = df.filter(~col("{{column_name}}").rlike(pattern)).count()

Test Data

Passing Examples

id	value
1	alice@example.com
2	bob.smith@company.co.uk
3	charlie+tag@domain.org

Failing Examples

id	value
1	not-an-email
2	@missing-local.com
3	spaces in@email.com

CLI

Terminal

npx dqhub install hipaa-safe-harbor-deidentified --format soda --table YOUR_TABLE
npx dqhub install hipaa-safe-harbor-deidentified --format dbt --model YOUR_MODEL
npx dqhub install hipaa-safe-harbor-deidentified --format sql --dialect snowflake