Infinium HR/PY Test Database De-Identification for HIPAA/Sarbanes-Oxley

The Infor Infinium HR/PY test database currently used in many organizations’s testing environment contains "live" production data - which includes live "Protected Health Information" (PHI). As part of your overall HIPAA compliance, this test data may need to be de-identified for current and past employees. Many companies currently dealing with Sarbanes-Oxley Section 404 test script compliance have implemented de-identification as part of a comprehensive HIPAA strategy.

If your HIPAA compliance strategy requires de-identification for your Infor Infinium HR/PY test environment, TCI wants to make you aware of a simple, low cost, turnkey solution.

Solution:
A utility is run against the Infor Infinium HR/PY test library. The connection between current and past employee identifiers (e.g., social security number, employee number, driver's license number, etc) and PHI data is identified. The utility then removes these "live" employee identifiers and completely replaces them with sample data, so that the test data does not contain any "real" identifiers. De-identification is additionally completed for all historical data. A total of 900 fields are de-identified within Infinium HR/PY.

The end result is a de-identified Infor Infinium HR/PY test database with the look and feel of live data while at the same time protecting the critical PHI information.