Export anonymization is the removal of PHI from a patient portal download (CSV, JSON, or a bundle). The HITECH Act raised the stakes on moving such data. anonym.plus anonymizes it on your own device, off the cloud.
When this applies
A portal lets people pull their own records, messages, and results into one download. For analytics that file must be stripped of identity first.
How anonym.plus handles it
- Point anonym.plus at the download folder on your server.
- It scans ID columns and any free-text fields.
- Steady labels keep links across joined rows intact.
- Review the summary and tune the column rules.
- Save the clean dataset on your device for later.
What you need to provide
- The download as CSV, JSON, or a file bundle.
- A column map for known ID fields.
- Replace with a steady label map to keep joins.
PHI entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | account name → [PATIENT] |
| Contact | EMAIL_ADDRESS | portal email → [EMAIL] |
| Identifiers | USERNAME | login handle → [HANDLE] |
| Dates | DATE_TIME | login date → shifted [TIME] |
| Network | IP_ADDRESS | access IP → [IP] |
| Record IDs | MEDICAL_RECORD_NUMBER | mrn field → [MRN] |
Compliance achieved
- Cuts breach risk under the HITECH Act by keeping data off the cloud.
- Supports HIPAA Safe Harbor once all ID types go.
- Keeps row links steady, so the file stays useful for analysis.
Anonymize patient portal exports offline — see plans & start free →
Limitations & cautions
A portal download mixes tidy columns with free-text notes and message bodies. The columns map cleanly; the free text needs the same review as any note. Test a sample before a full run.
Frequently asked questions
Can records stay linkable after the swap?
Yes. A steady label map swaps each ID the same way, so rows for one person still join while no real identity remains.
Why work locally rather than in the cloud?
Sending raw portal data to a cloud tool is itself a disclosure with breach risk under HITECH. Local work skips that risk.
Does it handle both fields and message bodies?
Yes. Structured columns and free-text message bodies in the bundle are both supported.