How is the intermediary going to determine what to remove? This seems concerning. The intermediary shouldn’t be getting the protected data in the first place. How is the sender going to know that data are being modified in transit and the recipient isn’t receiving the full notification?

Existing Wording:

In situations where information on a particular data element is not needed or considered protected information the Intermediary MAY remove the data elements in the resource instance when distributing the alert notification or responding to a Recipient’s query.  The Intermediary MAY provide the reason for the missing information using values (such as nullFlavors) from the value set where they exist or using the dataAbsentReason extension.