Identifying information is prohibited i.e. information that identifies an individual/patient or for which it is reasonably foreseeable in the circumstances that it could be used either alone or with other information to identify an individual/patient.