Only 3 States Provide Protections Equivalent to HIPAA

These are Missouri, Oregon and West Virginia.

State	HIPAA Equivalence for Demographic Data	HIPAA Equivalence for for Admission and Discharge	HIPAA Equivalence or Better for Both
Alabama
Alaska
Arizona	No	No	No
Arkansas	Yes	No	No
California	Yes	No	No
Colorado	No	No	No
Connecticut
Delaware
District of Columbia
Florida	No	Yes	No
Georgia
Hawaii	No	No	No
Idaho
Illinois	Stricter	No	No
Indiana
Iowa	No	No	No
Kansas
Kentucky	No	No	No
Louisiana
Maine	Stricter	No	No
Maryland	Yes	No	No
Massachusetts	Yes	No	No
Michigan
Minnesota
Mississippi
Missouri	Yes	Yes	Yes
Montana
Nebraska
Nevada	Stricter	No	No
New Hampshire	No	Yes	No
New Jersey	No	No	No
New Mexico	Yes	No	No
New York	No	No	No
North Carolina	No	No	No
North Dakota
Ohio
Oklahoma	No	No	No
Oregon	Yes	Yes	Yes
Pennsylvania	No	Yes	No
Rhode Island	Stricter	No	No
South Carolina	Stricter	No	No
South Dakota	No	No	No
Tennessee	No	No	No
Texas	No	No	No
Utah	No	No	No
Vermont	No	Yes	No
Virginia	No	No	No
Washington	No	No	No
West Virginia	Stricter	Yes	Yes
Wisconsin	No	No	No
Wyoming

Notes: A blank value indicates that State does not release public data. HIPAA equivalent if ZIP is only 3 digits and dates given only in years. "Stricter" if all fields were HIPAA equivalent or stricter. "No" (Less Strict) if any fields were not equivalent to HIPAA standard. Less strict if date, month, or quarter are given, but hour, length of stay and day of week do not effect strictness.

Hooley S and Sweeney L. Survey of Publicly Available State Health Databases. Harvard University. Data Privacy Lab. 1064-1. June 2013. PDF

More details about...

• Admission and Discharge fields
• Demographic fields
• Costs and Contacts
• Overview of State Survey

Matching patient names to the data (more...)

Public and private corporations top the list of most frequent multi-state purchasers of the data (more...)

(return to map)