Death Certificate De-Identification with anonym.plus

Clear IDs from the file while cause and broad demographics stay.

Death-certificate de-identification is the removal of the decedent, informant, and certifier IDs. It meets HIPAA Safe Harbor (45 CFR §164.514(b)). anonym.plus runs locally and keeps the cause-of-death chain and broad demographics for mortality work.

When this applies

Mortality datasets drive public-health research. But the file carries the full identity, the informant (often a relative), and the signing doctor. All must go before you share it.

How anonym.plus handles it

  1. Load the file into anonym.plus on your device.
  2. It finds decedent, informant, and certifier IDs.
  3. Exact dates and places get flagged; the cause text stays.
  4. Swap or black out the confirmed IDs.
  5. Save the clean file on your device.

What you need to provide

PHI entity types detected

Categoryanonym.plus entity typeExample
NamesPERSONdecedent name → [NAME]
RelativesPERSONinformant (spouse) → [INFORMANT]
NamesPERSONsigning doctor → [CERTIFIER]
DatesDATE_TIMEdate → [DATE]
LocationLOCATIONplace → [PLACE]
IdentifiersUS_SSNthe SSN → [ID]

Compliance achieved

Anonymize death certificates offline — see plans & start free →

Limitations & cautions

HIPAA guards a decedent's PHI for 50 years. Place and exact date are strong clues in mortality data — make them broad. A rare cause plus a place can re-identify after direct IDs go.

Frequently asked questions

Is a dead person's data still HIPAA-protected?

Yes. The Privacy Rule guards a decedent's PHI for 50 years after death, so these files still need de-identification before reuse.

Are informant and certifier details removed too?

Yes. The informant (often a relative) and the signing doctor are IDs and are flagged together.

Can the cause chain stay?

Yes. The cause chain stays for analysis. Only IDs go, though a rare cause needs extra care.