Researchers must adhere to strict regulations to protect PHI. These regulations include but are not limited to the Health Insurance Portability and Accountability Act (HIPAA) in the United States. HIPAA mandates that PHI should be de-identified unless absolutely necessary, and that stringent security measures be put in place to protect any identifiable data.
