OCR enforces the HIPAA Security Rule, which goals to stability affected person safety with the development of well being know-how. One instance of information that isn’t PHI would be blood pressure or coronary heart fee data collected by a shopper well being gadget, like a smartwatch, because it isn’t shared with a lined entity. Deidentified knowledge, meaning knowledge that does not identify or provide information that would identify an individual — there are no restrictions to its use or disclosure.