FHIR Chat · ANONYED · research

Stream: research

Topic: ANONYED


view this post on Zulip Michael van der Zel (Nov 11 2018 at 08:56):

I am trying to figure out how the security label ANONYED is supposed to work. In our case we have a Procedure resource that is anonymized, so the subject will be empty. The cardinality of subject is 1..1. What would be the agreed way to do this? Is it written somewhere in the FHIR specs?

view this post on Zulip Michael van der Zel (Nov 11 2018 at 08:59):

There is an example with "anonymized", but that patient is fully identifiable http://build.fhir.org/patient-example-f001-pieter.xml.html
I expexected the security label ANONYED in there at least, and for certainly not a National Security Number (BSN).

view this post on Zulip Lloyd McKenzie (Nov 11 2018 at 11:23):

It's only identifiable if that information is "real". Agree it should have the flag set - and it might be better not to have a BSN. Even for anonymized patients you'll typically want a gender and at least a birth year - which would be conveyed on the Patient resource. Also, you'll typically want a set of information and that information gets linked together with a shared Patient. Without that, there's no way to know that multiple Observations are for the same individual.

view this post on Zulip Lloyd McKenzie (Nov 11 2018 at 11:23):

Can you submit a change request so we can appropriately flag the anonymized patient?

view this post on Zulip John Moehrke (Nov 11 2018 at 17:07):

Have you reviewed the section on the security and privacy page? http://build.fhir.org/secpriv-module.html#deId

view this post on Zulip John Moehrke (Nov 11 2018 at 17:08):

The use of the ANONYED flag is useful at times, and problematic at other times. Thus it is there to be used, and would be a recommendation when data are co-mingled. However the use of the flag is not mandatory.

view this post on Zulip John Moehrke (Nov 11 2018 at 17:09):

see the section following that on test data http://build.fhir.org/secpriv-module.html#TestData

view this post on Zulip Michael van der Zel (Nov 17 2018 at 09:15):

In my use-case we have no use of any Patient information at all. We are doing a Implant Registry thing were only the provider and the implant are needed. Thanks for the links.


Last updated: Apr 12 2022 at 19:14 UTC