Enrollment log de-identification is the removal of all 18 HIPAA Safe Harbor IDs (45 CFR §164.514(b)) from the file. anonym.plus does this on your own device. The list still shows counts, but not who each person is.
When this applies
A coordinator must share enrollment numbers for a status update. The sheet links each code to a real name, a date of birth, and a phone.
How anonym.plus handles it
- Open the file (XLSX, CSV, or PDF) in anonym.plus on your device.
- The tool scans the rows for names, dates, and contact fields.
- Local OCR handles any scanned paper page you add.
- Confirm the flagged name, birth date, and phone columns.
- Swap names for codes, or black out the whole column.
- Save the clean copy. The original stays on your machine.
What you need to provide
- The file (XLSX, CSV, PDF, or scan).
- An operator: Redact a column, or Replace names with codes.
- Optional: a code map if you must re-link rows later.
PHI entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | Grace Adeyemi → [SUBJECT_3] |
| Birth date | DATE_TIME | DOB 12/07/1958 → [DOB] |
| Contact | PHONE_NUMBER | +1 312-555-0164 → [PHONE] |
| Address | LOCATION | 44 Oak St, ZIP 60616 → [ADDRESS] |
| SSN | US_SSN | 201-55-7788 → [SSN] |
| Local ID | MEDICAL_RECORD_NUMBER | MRN 778210 → [MRN] |
Compliance achieved
- Strips all 18 ID classes for HIPAA Safe Harbor (45 CFR §164.514(b)).
- Runs offline, so the tool itself needs no BAA.
- On-device AES-256-GCM guards the working file.
- Handles GDPR Art. 9 health data for EU subjects too.
Anonymize subject enrollment logs offline — see plans & start free →
Limitations & cautions
Safe Harbor also needs you to have no reason to think the rest could re-identify a subject. The tool removes the 18 ID types. A small site with one rare condition can still narrow things down. For that, use Expert Determination instead.
Frequently asked questions
What is a subject enrollment log?
It is the master sheet that maps each trial code to a real person, with a name, birth date, and contact. It is the key that lets you re-identify anyone, so it needs strong protection before any sharing.
Does this need a BAA?
No. anonym.plus runs on your own device with no cloud step. No outside party sees the rows, so the tool itself needs no BAA.
Can I keep the codes but drop the names?
Yes. Redact the name and contact columns and leave the trial codes. The shared copy then shows counts without naming anyone.