[vrde]

Alberto here, I made the bot.

I'm not a lawyer but "codice fiscale" is not PHI. The Italian Data Protection Authority puts codice fiscale under PII[0] and it's not mentioned in the PHI section[1,2,3,4].

[0] https://www.garanteprivacy.it/home/diritti/cosa-intendiamo-p...

[1] https://www.garanteprivacy.it/temi/dati-sanitari

[2] https://www.garanteprivacy.it/faq/fascicolo-sanitario

[3] https://www.garanteprivacy.it/faq/referti-online

[4] https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb...

[edit: formatting]

[sakawa]

First off, good work! It is always nice to help people deal on this (sicked and badthought) platforms.

Anyhow, you should check also if a "tessera sanitaria" is considered a PHI since it includes the "codice fiscale" (and if I recall correctly, it is used often in "fascicoli sanitari" to identify an individual).

But well, I'm not a lawyer either.

[corytheboyd]

Nice. Really I was just curious, and not trying to throw a wrench in anything, thanks for taking the time to dig that up!

[vrde]

NP! I was actually surprised that in the US a "codice fiscale" would be considered PHI :)