-
Type:
Change Request
-
Resolution: Persuasive with Modification
-
Priority:
Medium
-
US Making EHR Data More available for Research and Public Health (MedMorph) (FHIR)
-
0.1.0
-
Public Health
-
Trust Service Provider
-
-
Becky Angeles / Genny Luensman : 31 - 0 - 4
-
Clarification
-
Compatible, substantive
The operations pseudonymize, anonymize, de-identify, and re-identify all say all the algorithm are left up to the implementation. This is fine but implementers need more guidance on what they should do.
Is this interpretation correct of each operation?
pseudonymize: replace PHI/PII with mock data
anonymize: remove PHI/PII
de-identify: select either anonymize or pseudonymize
re-identify: put back PHI/PII.
Furthermore is re-identify supposed to work for any of the operations?