Radiology Worklist Anonymization with anonym.plus

Hide each patient in the queue while the slots stay readable.

Worklist de-identification is the removal of all 18 HIPAA Safe Harbor IDs (45 CFR §164.514(b)) from the file. anonym.plus runs it on your device. The slot layout stays, but no patient in the queue is named.

When this applies

You share a daily queue to plan staffing. The slots and study types can stay, yet each patient name and ID has to be hidden first.

How anonym.plus handles it

  1. Open the file (CSV, PDF, or scan) on your machine.
  2. Local OCR reads scanned pages, so printed rows are caught.
  3. The tool flags each name, date, and ID per row.
  4. Review the flags and keep the study type column.
  5. Swap each ID for a token, or remove it.
  6. Save the clean queue. The source stays with you.

What you need to provide

PHI entity types detected

Categoryanonym.plus entity typeExample
NamesPERSONErik Vance → [PATIENT_1]
DatesDATE_TIMESlot 09:30 06/18/2026 → [DATE]
Record IDsMEDICAL_RECORD_NUMBERMRN 880441 → [MRN]
IdentifiersIDAccession W-1209 → [ACCESSION]
ContactPHONE_NUMBER(602) 555 0123 → [PHONE]
AgeAGEAge 47 → [AGE]

Compliance achieved

Anonymize radiology worklists offline — see plans & start free →

Limitations & cautions

A queue packs many rows. Confirm the tool flagged a name in every row before you share it. One missed row exposes one patient.

Frequently asked questions

Can a whole table be cleaned in one pass?

Yes. The app reads each row and flags the ID fields. A full day's queue can be cleaned together, not row by row.

Do study types and time slots stay?

Yes. Those columns hold no patient identity. They stay in place so the queue still shows the day's workload.

How do I keep rows linked for planning?

Use a name map. Each patient gets one stable token. You can still group repeat visits with no real name shown.