Our data posture

Invest Hamilton County does not collect, store, or transmit Protected Health Information (PHI).

All BH data published through Alex is aggregated at the city-band level or higher, with a 5-cell minimum suppression floor. We are not a covered entity under HIPAA; this dashboard is a public-benefit analytical resource, not a clinical platform.

What we DO collect

• Email addresses (with explicit consent at /subscribe).
• Non-PII demographic context you provide voluntarily: employer name, role.
• Aggregate dashboard usage (cookieless analytics, no PII).

What we DO NOT collect

• Any clinical information — diagnoses, treatment plans, prescription data, insurance claims, individual health records.
• Any data that could be used to re-identify a patient or family member.
• Browser fingerprints. Cross-site tracking. Behavioral profiles.

Aggregation floor

Every dashboard we publish aggregates at the city-band level or higher with a 5-cell minimum suppression floor. If a cell would surface fewer than 5 underlying units (people, providers, employers), the cell is suppressed. This is more conservative than the Department of Justice and Federal Trade Commission 1996 Statement 6 safe harbor for benefits-data aggregation.

Why this matters

Behavioral health data carries more weight than the average labor-market or economic-development dataset. Re-identification at the individual or family level can affect employment, custody, parole, insurance underwriting, and personal safety. The aggregation floor + PHI-free posture together close that exposure surface for everyone who shows up in our dashboards.

Independent verification

The aggregation-floor middleware that enforces these rules is open methodology and runs on every server-side query before any visualization renders. View the open methodology for the exact implementation.

Engine v1.2.0 · spec v1.2.0 · tenant behavioral-health-employer