Skills › Scientific Agent Skills › clinical-decision-support › deidentification_checklist_template.json
deidentification_checklist_template.json
176 lines · skills/clinical-decision-support/assets/deidentification_checklist_template.json at 5f2bc03
1{
2 "schema_version": "1.0",
3 "checklist_id": "REPLACE_WITH_CHECKLIST_ID",
4 "title": "De-identification Process Documentation Checklist",
5 "method": "undecided",
6 "intended_use": "Document qualified human review without supplying a dataset.",
7 "prohibited_uses": [
8 "Do not paste PHI, raw rows, notes, images, sequences, or example identifiers.",
9 "Do not claim de-identification, HIPAA compliance, or publication safety from this checklist."
10 ],
11 "limitations": [
12 "The script does not inspect or transform data.",
13 "The checklist cannot determine covered-entity status or legal obligations.",
14 "Residual linkage and differencing risks require contextual expert review."
15 ],
16 "data_boundary": {
17 "raw_data_supplied": false,
18 "metadata_only": true,
19 "data_context": "REPLACE_WITH_HIGH_LEVEL_DATA_CONTEXT_WITHOUT_SENSITIVE_VALUES",
20 "recipient_context": "REPLACE_WITH_RECIPIENT_AND_ACCESS_CONTEXT",
21 "release_context": "REPLACE_WITH_RELEASE, ACCESS, AND PRIOR-RELEASE_CONTEXT"
22 },
23 "source_ids": [
24 "HHS-DEID",
25 "CFR-164514"
26 ],
27 "sources": [
28 {
29 "id": "HHS-DEID",
30 "citation": "HHS OCR. Guidance Regarding Methods for De-identification of Protected Health Information.",
31 "url": "https://www.hhs.gov/hipaa/for-professionals/special-topics/de-identification/index.html",
32 "accessed": "2026-07-23"
33 },
34 {
35 "id": "CFR-164514",
36 "citation": "45 CFR 164.514, Other requirements relating to uses and disclosures of protected health information.",
37 "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.514",
38 "accessed": "2026-07-23"
39 }
40 ],
41 "identifier_categories": [
42 {
43 "id": "names",
44 "status": "unresolved",
45 "evidence": "REQUIRES_HUMAN_DOCUMENTATION_WITHOUT_VALUES"
46 },
47 {
48 "id": "geography",
49 "status": "unresolved",
50 "evidence": "REQUIRES_HUMAN_DOCUMENTATION_WITHOUT_VALUES"
51 },
52 {
53 "id": "dates_and_ages",
54 "status": "unresolved",
55 "evidence": "REQUIRES_HUMAN_DOCUMENTATION_WITHOUT_VALUES"
56 },
57 {
58 "id": "telephone_numbers",
59 "status": "unresolved",
60 "evidence": "REQUIRES_HUMAN_DOCUMENTATION_WITHOUT_VALUES"
61 },
62 {
63 "id": "fax_numbers",
64 "status": "unresolved",
65 "evidence": "REQUIRES_HUMAN_DOCUMENTATION_WITHOUT_VALUES"
66 },
67 {
68 "id": "email_addresses",
69 "status": "unresolved",
70 "evidence": "REQUIRES_HUMAN_DOCUMENTATION_WITHOUT_VALUES"
71 },
72 {
73 "id": "social_security_numbers",
74 "status": "unresolved",
75 "evidence": "REQUIRES_HUMAN_DOCUMENTATION_WITHOUT_VALUES"
76 },
77 {
78 "id": "medical_record_numbers",
79 "status": "unresolved",
80 "evidence": "REQUIRES_HUMAN_DOCUMENTATION_WITHOUT_VALUES"
81 },
82 {
83 "id": "health_plan_numbers",
84 "status": "unresolved",
85 "evidence": "REQUIRES_HUMAN_DOCUMENTATION_WITHOUT_VALUES"
86 },
87 {
88 "id": "account_numbers",
89 "status": "unresolved",
90 "evidence": "REQUIRES_HUMAN_DOCUMENTATION_WITHOUT_VALUES"
91 },
92 {
93 "id": "certificate_license_numbers",
94 "status": "unresolved",
95 "evidence": "REQUIRES_HUMAN_DOCUMENTATION_WITHOUT_VALUES"
96 },
97 {
98 "id": "vehicle_identifiers",
99 "status": "unresolved",
100 "evidence": "REQUIRES_HUMAN_DOCUMENTATION_WITHOUT_VALUES"
101 },
102 {
103 "id": "device_identifiers",
104 "status": "unresolved",
105 "evidence": "REQUIRES_HUMAN_DOCUMENTATION_WITHOUT_VALUES"
106 },
107 {
108 "id": "web_urls",
109 "status": "unresolved",
110 "evidence": "REQUIRES_HUMAN_DOCUMENTATION_WITHOUT_VALUES"
111 },
112 {
113 "id": "ip_addresses",
114 "status": "unresolved",
115 "evidence": "REQUIRES_HUMAN_DOCUMENTATION_WITHOUT_VALUES"
116 },
117 {
118 "id": "biometric_identifiers",
119 "status": "unresolved",
120 "evidence": "REQUIRES_HUMAN_DOCUMENTATION_WITHOUT_VALUES"
121 },
122 {
123 "id": "full_face_images",
124 "status": "unresolved",
125 "evidence": "REQUIRES_HUMAN_DOCUMENTATION_WITHOUT_VALUES"
126 },
127 {
128 "id": "other_unique_identifiers",
129 "status": "unresolved",
130 "evidence": "REQUIRES_HUMAN_DOCUMENTATION_WITHOUT_VALUES"
131 }
132 ],
133 "safe_harbor_review": {
134 "actual_knowledge": "REQUIRES_HUMAN_REVIEW",
135 "free_text": "REQUIRES_HUMAN_REVIEW",
136 "derived_fields": "REQUIRES_HUMAN_REVIEW",
137 "date_age_zip_rules": "REQUIRES_HUMAN_REVIEW",
138 "reviewer_role": "REPLACE_WITH_QUALIFIED_ROLE",
139 "review_date": "YYYY-MM-DD",
140 "completed": false
141 },
142 "expert_determination_review": {
143 "expert_qualification_reference": "REQUIRES_QUALIFIED_EXPERT_IF_SELECTED",
144 "method_document_reference": "REQUIRES_QUALIFIED_EXPERT_IF_SELECTED",
145 "risk_threshold_rationale": "REQUIRES_QUALIFIED_EXPERT_IF_SELECTED",
146 "residual_risk": "REQUIRES_QUALIFIED_EXPERT_IF_SELECTED",
147 "validity_period": "REQUIRES_QUALIFIED_EXPERT_IF_SELECTED",
148 "change_triggers": "REQUIRES_QUALIFIED_EXPERT_IF_SELECTED",
149 "review_date": "YYYY-MM-DD",
150 "completed": false
151 },
152 "residual_risk_review": {
153 "linkage": "REQUIRES_HUMAN_REVIEW",
154 "differencing": "REQUIRES_HUMAN_REVIEW",
155 "rare_combinations": "REQUIRES_HUMAN_REVIEW",
156 "longitudinal_patterns": "REQUIRES_HUMAN_REVIEW",
157 "geography": "REQUIRES_HUMAN_REVIEW",
158 "genomics": "REQUIRES_HUMAN_REVIEW",
159 "prior_releases": "REQUIRES_HUMAN_REVIEW",
160 "completed": false
161 },
162 "human_review": {
163 "required": true,
164 "role": "qualified privacy reviewer or de-identification expert",
165 "completed": false,
166 "approval_boundary": "Completion documents a process only and does not establish de-identification or HIPAA compliance."
167 },
168 "governance": {
169 "version": "0.1-draft",
170 "owner": "REPLACE_WITH_PRIVACY_GOVERNANCE_OWNER_ROLE",
171 "change_summary": "Initial unresolved template.",
172 "auditability": "Retain method documentation, assumptions, approvals, release context, and change triggers without sensitive values.",
173 "monitoring": "Reassess when data, recipients, linkage sources, prior releases, or release conditions change."
174 },
175 "compliance_claims": false
176}