Table 3.

Consensus Expectations for the Content Area, “Collection Limitations”

Health information trustees should limit collection of health information to that information required for current needs, or reasonably projected future needs, which are made explicit at the time consent is obtained.

3.1 All data collectors receive training in collection limitations, including fair and lawful means to collect information and the rationales for limiting data collection.

3.2 The health information trustee has a written policy on health information retention and destruction that specifies whether and how identifiable health information that is not reasonably expected to be used for 1 or more defined purposes is to be discarded, deidentified, or archived.