Controlled Substance Log Redaction with anonym.plus

Clear IDs from the register while the count and balance stay.

Controlled-substance log redaction is the removal of patient and staff IDs from a scheduled-drug register. It meets the HIPAA Privacy Rule (45 CFR Part 164). anonym.plus runs locally and keeps the medicine, count, and balance.

When this applies

A scheduled-drug register names the patient and the witnessing staff per line. For a diversion review, you clear those IDs but keep the counts and balances.

How anonym.plus handles it

  1. Load the register into anonym.plus on your device.
  2. It finds patient and witness names plus staff IDs.
  3. Dates and badge numbers get flagged across each line.
  4. Confirm the flags; the medicine and count stay as non-IDs.
  5. Black out items for the review, or swap them for analysis.
  6. Save the clean file; the source stays on your machine.

What you need to provide

PHI entity types detected

Categoryanonym.plus entity typeExample
NamesPERSONpatient column → [PATIENT]
NamesPERSONwitness initials → [STAFF]
DatesDATE_TIME08:00 03/05 → [TIME]
IdentifiersNATIONAL_IDstaff badge → [STAFF_ID]
Record IDsMEDICAL_RECORD_NUMBERentry no. 9921 → [ENTRY_ID]
LocationLOCATIONWard 3 safe → [SITE]

Compliance achieved

Anonymize controlled substance logs offline — see plans & start free →

Limitations & cautions

These registers are tightly tabular. Check that the witness and badge columns are mapped, since initials are easy to miss yet name a person. The medicine, count, and balance stay and are not treated as IDs.

Frequently asked questions

Are witness initials IDs?

Yes. Witness initials and badges name the staff who signed off, so they go for de-identification. The medicine and count entries stay.

Can I keep the running balance?

Yes. The medicine, count, and balance stay, so the register still supports a review.

Does it read system exports?

Yes. CSV exports and printed registers both work, all on your own device.