Response: In the final rule, we reformulate the method for de-identification to more explicitly use the statutory standard of «a reasonable basis to believe that the information can be used to identify the
individual» —
just as information is «individually
identifiable» if there is a reasonable basis to believe that it can be used to identify the
individual, it is «de-identified» if there is no reasonable basis to believe it can be so used.