Registry de-identification is the removal of all 18 HIPAA Safe Harbor IDs (45 CFR §164.514(b)) from the export. anonym.plus does this on your own device. The outcome fields stay, but no patient is named.
When this applies
A registry shares a cohort with a research partner. The export still holds patient names, full dates, and a record number per row.
How anonym.plus handles it
- Open the export (CSV, XLSX, or PDF) in anonym.plus on your device.
- The tool scans every row for names, dates, and record numbers.
- Local OCR reads a scanned intake page if you add one.
- Confirm the flagged identifiers across the columns.
- Swap names for codes, or black out whole columns.
- Save the clean export locally with no upload.
What you need to provide
- The export (CSV, XLSX, PDF, or scan).
- An operator: Replace for codes, Redact for whole fields.
- Optional: a code map if you re-link rows later.
PHI entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | Diego Morales → [PATIENT_6] |
| Dates | DATE_TIME | enrolled 15/01/2026 → [DATE] |
| Record number | MEDICAL_RECORD_NUMBER | REG 90431 → [REG_ID] |
| Address | LOCATION | ZIP 33101, Miami → [ADDRESS] |
| SSN | US_SSN | 402-66-1199 → [SSN] |
| Contact | EMAIL_ADDRESS | d.morales@example.com → [EMAIL] |
Compliance achieved
- Strips all 18 ID classes for HIPAA Safe Harbor (45 CFR §164.514(b)).
- Runs offline, so the tool itself needs no BAA.
- On-device AES-256-GCM guards the working export.
- Handles GDPR Art. 9 health data for EU patients too.
Anonymize patient registries offline — see plans & start free →
Limitations & cautions
Safe Harbor also needs you to have no reason to think the rest could re-identify a patient. The tool removes the 18 ID types. A rare diagnosis in a small ZIP can still narrow the field. For that, use Expert Determination instead.
Frequently asked questions
What is a patient registry?
It is an organised collection of data on people with a shared condition or treatment, tracked over time. Sharing a cohort for research means stripping the 18 Safe Harbor IDs from the export first.
Does this need a BAA?
No. anonym.plus runs on your own device with no cloud step. No outside party sees the rows, so the tool itself needs no BAA.
Can the outcomes still be analysed?
Yes. Diagnoses, treatments, and outcome fields stay. Only the 18 direct identifiers are swapped or removed.