Access-log anonymization is the removal of the identifying detail from an EHR audit trail: usernames, IP addresses, and timestamps. The HITECH Act raised the stakes on such trails. anonym.plus does this on your own device, keeping the viewing pattern.
When this applies
An audit trail shows which worker opened which chart and when. To study these patterns or train a model, the usernames, IPs, and patient links must come out.
How anonym.plus handles it
- Point anonym.plus at the trail on your server.
- It scans username, IP, host, and timestamp fields.
- Steady labels keep one worker's actions linked.
- Review the summary and tune the field rules.
- Swap each identifier, shifting times to keep the order.
- Save the clean trail. Source entries stay local.
What you need to provide
- The trail (CSV, JSON, or log export).
- A field map for username, IP, and host columns.
- Replace with a steady map to keep action chains.
PHI entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Staff ID | ID | user jmertens → [USER_n] |
| Network | IP_ADDRESS | 10.14.2.9 → [IP_n] |
| Dates | DATE_TIME | 08:42:11 access → shifted [TIME] |
| Patient | PERSON | viewed chart: A. Roth → [PATIENT] |
| Record IDs | MEDICAL_RECORD_NUMBER | MRN opened → [MRN_n] |
| Location | LOCATION | host WS-RAD-04 → [HOST] |
Compliance achieved
- Cuts exposure under the HITECH Act by keeping trails off the cloud.
- Removes usernames, IPs, and timestamps as identifiers.
- Steady labels keep the viewing pattern analysable.
Anonymize access logs offline — see plans & start free →
Limitations & cautions
An audit trail can re-identify by pattern alone: a single worker active at an odd hour on one ward may stand out after the username goes. Shift the times and weigh whether the pattern itself needs coarsening before you share.
Frequently asked questions
What is in an EHR audit trail?
Each entry shows a username, an IP or host, a timestamp, and the chart opened. All of these identify a worker or a patient, so they are cleared for safe sharing.
Why does HITECH matter here?
HITECH strengthened the rules around who may view a chart. Keeping the trail on-device and anonymizing it before reuse lowers that exposure.
Can one worker's actions stay linked?
Yes. A steady map gives one user the same alias, so the sequence of actions is preserved.