Claim form de-identification is the removal of patient and provider IDs from a billing form such as a CMS-1500 or UB-04. It meets the HIPAA Privacy Rule (45 CFR Part 164). anonym.plus does this on your own device.
When this applies
You want to share a form for an audit, a study, or staff training. Each use needs the names, IDs, and dates stripped first.
How anonym.plus handles it
- Open the form (PDF, scan, or export) in anonym.plus on your device.
- Local OCR reads scanned pages, so printed boxes get caught too.
- The tool flags the member, the provider, dates, and ID numbers.
- Check each flag and keep the billing codes you still need.
- Swap each ID for a safe label, or black it out.
- Save the clean copy. The original never leaves your machine.
What you need to provide
- The form (PDF, TXT, DOCX, or image scan).
- An operator: Replace (swap), Redact (remove), or Mask (partial).
- Optional alias map if you need to re-link rows later.
PHI entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | Subscriber Dana Reyes → [MEMBER] |
| Beneficiary | US_HEALTH_PLAN_BENEFICIARY | HICN 1EG4-TE5-MK72 → [BENEFICIARY_ID] |
| Account | ACCOUNT_NUMBER | Acct 55-220914 → [ACCOUNT] |
| Dates | DATE_TIME | DOS 04/12/2026 → [DATE] |
| Provider | PERSON | Dr. Holt, NPI → [PROVIDER] |
| SSN | US_SSN | 078-05-1120 → [ID] |
Compliance achieved
- Meets the HIPAA Privacy Rule (45 CFR Part 164) for reuse.
- Catches subscriber, beneficiary, and account numbers as identifiers.
- Runs offline, so the tool itself needs no BAA.
- Working copies are guarded by AES-256-GCM.
Anonymize claim forms offline — see plans & start free →
Limitations & cautions
Billing layouts pack IDs into fixed boxes. Map your custom fields so none slip past. The tool finds named items, but a rare procedure on a known date at a small site can still narrow identity. Judge those edge cases yourself.
Frequently asked questions
Which IDs sit on a typical billing form?
Subscriber name, beneficiary or member number, account number, group or plan code, the date of service, the provider, and often an SSN. Each one is flagged for removal.
Does this need a BAA?
No. anonym.plus runs on your own device with no cloud step. No outside party touches the data, so the tool itself needs no BAA.
Can I keep the procedure codes?
Yes. Non-ID billing codes can stay via an allow-list while the personal IDs go.