Whenever can ZIP codes be incorporated into de-identified information? Covered entities can sometimes include the initial three digits associated with