Two methods recommended for patient de-identification include Safe Harbor and Expert Determination. You are a privacy analyst working in the HIM Department at Ludwig Hospital. Educate your fellow coworkers who do not specialize in HIM on what these two methods are and why they are under HIPAA's Privacy Rule?