De-identified data is data that has had all identifiers removed, making it no longer considered protected health information (PHI) under the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule. The process for disposing of de-identified data is not specifically outlined in the Certificate of Disposition for CMS Data form, as it is no longer considered PHI and is not subject to the same disposal requirements. However, it is still important to follow any organizational policies and procedures for handling and disposing of de-identified data to ensure its security and confidentiality.