Health information that excludes certain direct identifiers, but may include city, state, and ZIP code; elements of date; and other numbers, characteristics, or codes that cannot be used to identify an individual or the individual's relatives, employers, or household members. Limited data sets may be used or disclosed for purposes of research with a data use agreement as described by the HIPAA Privacy Rule at 45 CFR 164. For more information, including the list of identifiers that must be removed from health information in a limited data set, see HIPAA and Human Subjects Research.