Contact Tracing Record Redaction with anonym.plus

De-identify a tracing log before it leaves the safety office.

Contact tracing record redaction is the removal of identifiers from an exposure log, guided by HIPAA Safe Harbor at 45 CFR §164.514(b). That method lists 18 identifier classes to strip. anonym.plus marks each one on your device, so the tracing data stays useful while the people are de-identified.

When this applies

Such a log links workers, dates of exposure, and any symptoms reported. You strip the 18 Safe Harbor identifiers before a copy is shared.

How anonym.plus handles it

  1. Open the log in anonym.plus on your device.
  2. Local OCR reads a scanned tracing sheet.
  3. The tool flags names, dates, conditions, and phones.
  4. Confirm each flag against the Safe Harbor list.
  5. Swap or black out the confirmed items.
  6. Save the de-identified copy locally.

What you need to provide

PII entity types detected

Categoryanonym.plus entity typeExample
NamesPERSONJoel Pratt → [PERSON]
HealthMEDICAL_CONDITIONfever, cough → [CONDITION]
DatesDATE_TIMEexposed 03/11 → [DATE]
PhonePHONE_NUMBER(415) 555 7780 → [PHONE]
EmailEMAIL_ADDRESSjpratt@example.com → [EMAIL]
LocationLOCATIONbreak room → [AREA]

Compliance achieved

Anonymize contact tracing records offline — see plans & start free →

Limitations & cautions

anonym.plus is not a HIPAA Business Associate and signs no BAA. Safe Harbor also bars actual knowledge that data could re-identify someone; a small site may still expose a person, so review such logs.

Frequently asked questions

Does this make me HIPAA compliant?

The tool applies the Safe Harbor identifier list locally. Compliance is yours to confirm; anonym.plus is not a Business Associate and signs no BAA.

How many identifier classes does Safe Harbor list?

Eighteen, from names and dates to contact and device data. The tool flags those classes for your review.

Is the log uploaded?

No. The app runs locally, so tracing data stays on your device.