The types of data specified in §C of this regulation may be released to an applicant whose application has been approved in accordance with the requirements of this chapter. The availability of the types of data specified in §C of this regulation requesting Medicaid data are subject to a determination of availability by Medicaid. Data may be provided pursuant to an approved application at the following levels of detail: De-identified standard analytic file: A data extract that contains only data elements that are not considered PHI because the extract excludes direct and indirect individual identifiers as defined in the HIPAA Privacy Rule. Limited data set: A data extract that contains a limited set of indirect individual identifiers as defined in the HIPAA Privacy Rule and excludes direct individual identifiers. Custom data file: A data extract that is created based on criteria provided by an applicant and deemed the minimum amount necessary for an applicant’s proposed use of the data and consists of: Indirect individual identifiers that can be used to identify individuals when combined with other information or data; or Aggregate, summary data in which the risk of identifying individuals is minimal.