Coded de-identified data is not protected by the HIPAA Privacy Rule, but is protected under the Common Rule.
Decoded de-identified data falls outside the scope of the HIPAA Privacy Rule, yet it is within the purview of the Common Rule.