WA Health Care Authority Small Numbers Standard. Any HCA external publication of data products are to be compliant with both HIPAA and Washington State privacy laws. Data products are not to contain small numbers that could allow re-identification of individual beneficiaries. HCA analysts are to adhere to the following requirements when developing Category 1 data products for distribution and publication. Category 1 data is information that can be released to the public. These products do not need protection from unauthorized disclosure but do need integrity and availability protection controls. Additionally, all contractors (state and private) that use HCA’s data to produce derivative reports and data products are required to adhere to this standard as well. HCA’s Contracts team will ensure that proper contractual references are included to this and all HCA Data Release and Publishing Standards. The requirements discussed herein are not intended for Category 2, Category 3, or Category 4 data products.
