Certified De-identification Methodology Course

The Data De-Identification Methodology course includes in-depth instruction on the HITRUST De-Identification Framework and generally accepted de-identification methods and tools. The course helps provide the knowledge and skills needed by security, privacy, legal, compliance, IT, and other professionals to provide oversight for, or otherwise evaluate/assess, an organization’s data de-identification program to help manage risks associated with the use and disclosure of de-identified data sets for secondary purposes. This applies whether data is being shared internally within the organization or externally to third parties.

The course also provides data science, statistical, mathematical, and other scientific professionals with the knowledge and skills necessary to perform data de-identification. Various methods and tools used in the de-identification of data are covered, with emphasis on the Expert Determination method described in the HIPAA Privacy Rule. The curriculum is supported by case studies, interactive workshops, and real-world application of the knowledge learned in the course.

The course is delivered in two parts to enrolled participants. Introductory material is delivered online via the HITRUST Academy, and the remaining material is delivered over a full, two-day period by an instructor in a virtual classroom setting.


The course is based on the HITRUST De-Identification Framework and provides additional instruction on generally accepted methods of data de-identification. Major topical areas of the course include, but are not limited to:

  • Background & scope of data de-identification
  • De-identification concepts and related definitions
  • Re-identification risk measurement and related concepts
  • Analysis of contextual risk for de-identified datasets
  • Data masking & de-identification
  • Risk management & reporting

Intended Audience

The course is recommended for professionals in the security, privacy, legal, compliance, IT and related domains, as well as professionals in data science, statistical, mathematical, and other scientific domains who want to have a better understanding of the HITRUST De-Identification Framework and the practical methods and tools used to render a data set de-identified under the HIPAA “Expert Determination method.”

The course may also be used by professionals in the security, privacy, legal, compliance, IT and related domains seeking the HITRUST Certified De-Identification Associate (CDA) credential, or by professionals in the data science, statistical, mathematical or other scientific domains seeking the HITRUST Certified De-Identification Professional (CDP) credential.


The cost for the HITRUST Data De-Identification Methodology training and CDA/CDP prep course is $2,000. Qualified professionals who attend the course may take the examination at no additional cost. Course attendees have 90 days after the course completion to take the online exam. After 90 days, individuals must register separately for the exam with HITRUST and pay an exam fee ($650).

CDA/CDP candidates may take the exam without attending the course by registering with HITRUST for the exam and paying the $650 exam fee. Candidates have 90 days after purchase to take the online exam.

Course Materials

To properly access and utilize the course materials, students must provide their own computer, equipped with either the Chrome, Edge, Safari (except on Windows), or Firefox browser, and Adobe Reader software. (Note: Internet Explorer is not supported on the Academy platform).


Individuals enrolled in the course are given access to the online material approximately 30 days prior to their course start date (estimated time to complete 2-3 hours). Students are expected to have read, if not studied, the materials prior to class start.

In addition to the online course material, students will receive the following two books that contain information covered on the exam when they attend the class. Some students choose to purchase these texts in advance at their own expense.

  • Guide to the De-Identification of Personal Health Information, by Dr. Khaled El Emam
  • Anonymizing Health Data: Case Studies and Methods to Get You Started, by Dr. Khaled El Emam and Luk Arbuckle


This HITRUST course is not required to take the Data De-Identification Methodology Exam and submit the application for the data de-identification credential. Candidates for the CDA or CDP must pass the online exam and complete a self-explanatory application form (Application for CDA/CDP Certification) to be considered for the award of the credential.

As with all professional certifications, relying parties should consider a combination of education, certification, and experience when evaluating whether an individual is qualified to perform a particular service. The CDP credential is intended only for those professionals with the education and experience necessary for performing the actual de-identification of data using the “Expert Determination method” described in the HIPAA Privacy Rule.

Additional Information

For more information on the Data De-Identification Methodology credential program, please email de-id@hitrustalliance.org. For questions about the training course, please call 855.HITRUST or email education@hitrustalliance.net.

Payment and Change Policies

More detailed information regarding payment, cancellations, refunds, transfer and substitutions is available here.

Logistics Information for Virtual Classes

To help you prepare for HITRUST Academy, classroom-related information is available here.

Ready to Register?

Click here to register for the Certified HITRUST Quality Professional Course


Chat Now

This is where you can start a live chat with a member of our team