Under HIPAA Privacy Rules, a music therapist must remove which of the following types of data when "de-identifying" client information?
1) the client's street address
2) the client's social security number
3) the client's state of residence
4) the client's email address