I am building a PHI user profile for our Salesforce instance. 

This user profile should block visibility based on the 18 identifiers that make health information PHI:

• Names

• Dates, except year

• Telephone numbers

• Geographic data

• FAX numbers

• Social Security numbers

• Email addresses

• Medical record numbers

• Account numbers

• Health plan beneficiary numbers

• Certificate/license numbers

• Vehicle identifiers and serial numbers including license plates

• Web URLs

• Device identifiers and serial numbers

• Internet protocol addresses

• Full face photos and comparable images

• Biometric identifiers (i.e. retinal scan, fingerprints)

• Any unique identifying number or code

How have others set up PHI compliant profiles?

Looking for advice.