Home / Safety, Ethics & Governance
De-identification and Re-identification Risk
Removing identifying details can reduce privacy risk, but remaining information may still allow a person to be recognised.
#Removing names is not the whole assessment
HHS explains that health information can identify someone through direct identifiers or through other information associated with health, care or payment. Its HIPAA guidance describes two routes to the US Privacy Rule's de-identification standard: Expert Determination and Safe Harbor.
These are defined methods within a particular regulatory framework, not a claim that deleting a name anonymizes any dataset. Read the method and the information left behind. This page does not provide a complete de-identification procedure or a legal determination.
#Residual risk depends on context
The guidance states that properly applied methods still leave some identification risk. Expert assessment considers the anticipated recipient and other reasonably available information. It does not specify one numerical risk threshold that universally satisfies the expert method.
A dataset cannot be judged only by inspecting its columns in isolation. Read what other sources might be linked to it and what access conditions apply. A low risk assessed for one recipient or environment may not transfer unchanged to another.
#Risk reduction can change research usefulness
HHS describes techniques such as suppressing or generalizing information and notes that de-identification can lose information useful for research. It explains that no single technique is best for every dataset and recipient.
Read what was removed or changed and how that affects the intended analysis. A privacy-protective transformation is not proof that the remaining data are representative, complete or suitable for every research question. Method choice involves the intended use as well as identification risk.
#Document the release and its limits
The guidance emphasizes documenting methods and results for expert determination. It also explains that technology and available information can change over time, so future releases may need additional or different assessment.
A de-identified label should not become a blanket guarantee of anonymity or permission under every law or agreement. Read which framework was used, who assessed it and what conditions apply. Mynd has not processed a patient dataset or provided a de-identification service on this page.
Source note
The sections above were checked against the linked sources. No clinical review has been performed. This is general research education, not a clinical guideline.