Risk Management File De-Identification with anonym.plus

Clear every ID from a claims or risk file before you pool the data.

Risk-file de-identification is the removal of all 18 HIPAA Safe Harbor IDs (45 CFR §164.514(b)) from a claims or near-miss dossier. anonym.plus runs on your device. The facts of the event stay, but the people are no longer named.

When this applies

A risk team tracks claims and near-misses that name patients, staff, and lawyers. To find trends across them, the identifying detail must come out first.

How anonym.plus handles it

  1. Open the dossier in anonym.plus on your device.
  2. Local OCR reads scanned correspondence and forms.
  3. It flags patient, staff, and counsel names plus dates.
  4. Confirm the flags and keep your non-ID case codes.
  5. Swap each item for a steady label, or remove it.
  6. Save the cleaned copy. The source stays local.

What you need to provide

PHI entity types detected

Categoryanonym.plus entity typeExample
PatientPERSONclaimant J. Ito → [PATIENT]
StaffPERSONDr. Reuter → [STAFF]
LegalPERSONcounsel M. Stern → [COUNSEL]
DatesDATE_TIMEfiled 06/2025 → [DATE]
Record IDsMEDICAL_RECORD_NUMBERMRN 318822 → [MRN]
IdentifiersIDclaim no. RM-7741 → [CLAIM_ID]

Compliance achieved

Anonymize risk management files offline — see plans & start free →

Limitations & cautions

A claims dossier is mostly narrative and quotes many parties. A unique mix of date, site, and event can still point to one matter after names go. Review such lines, and weigh whether Expert Determination fits a rare case.

Frequently asked questions

Whose data is in a risk dossier?

These records name patients, staff, and often legal counsel. Patient data is PHI; the rest is personal data. For trend work, all of it is swapped.

Can I keep matters linked across many records?

Yes. A label map gives one claim the same steady alias wherever it appears.

Is anything sent off the device?

No. All work is local, so a sensitive claims dossier is never uploaded.