De-Identification Handbook
2.0.0-comment - ballot

De-Identification Handbook, published by IHE IT Infrastructure Technical Committee. This guide is not an authorized publication; it is the continuous build for version 2.0.0-comment built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/IHE/ITI.DeIdHandbook/ and changes regularly. See the Directory of published versions

## : Audit Example of authorized Re-Identification at source - XML Representation

Raw xml | Download

    <AuditEvent xmlns="http://hl7.org/fhir">
      <id value="ex-auditReIdentification-source"/>
      <meta>
        <profile
                 value="https://profiles.ihe.net/ITI/DeId/StructureDefinition/IHE.BasicAudit.DeIdentification.Source"/>
        <security>
          <system value="http://terminology.hl7.org/CodeSystem/v3-ActReason"/>
          <code value="HTEST"/>
        </security>
      </meta>
      <text>
        <status value="generated"/>
        <div xmlns="http://www.w3.org/1999/xhtml"><p class="res-header-id"><b>Generated Narrative: AuditEvent ex-auditReIdentification-source</b></p><a name="ex-auditReIdentification-source"> </a><a name="hcex-auditReIdentification-source"> </a><div style="display: inline-block; background-color: #d9e0e7; padding: 6px; margin: 4px; border: 1px solid #8da1b4; border-radius: 5px; line-height: 60%"><p style="margin-bottom: 0px"/><p style="margin-bottom: 0px">Profile: <a href="StructureDefinition-IHE.BasicAudit.DeIdentification.Source.html">Audit Event for De-Identification at Source</a></p><p style="margin-bottom: 0px">Security Label: <a href="http://hl7.org/fhir/R4/v3/ActReason/cs.html">test health data (Details: v3 Code System ActReason code HTEST = 'test health data')</a></p></div><p><b>type</b>: <a href="http://hl7.org/fhir/R4/codesystem-dicom-dcim.html#dicom-dcim-110106">DICOM: 110106</a> (Export)</p><p><b>subtype</b>: <a href="http://hl7.org/fhir/R4/codesystem-iso-21089-lifecycle.html#iso-21089-lifecycle-reidentify">ISO 21089-2017 Health Record Lifecycle Events: reidentify</a> (Re-identify Record Lifecycle Event), <a href="http://hl7.org/fhir/R4/codesystem-restful-interaction.html#restful-interaction-read">FHIR Restful Interactions: read</a> (read)</p><p><b>action</b>: Read/View/Print</p><p><b>recorded</b>: 2025-04-29 09:49:00+0000</p><p><b>outcome</b>: Success</p><p><b>purposeOfEvent</b>: <span title="Codes:{http://terminology.hl7.org/CodeSystem/v3-ActReason HRESCH}">healthcare research</span></p><blockquote><p><b>agent</b></p><p><b>type</b>: <span title="Codes:{http://dicom.nema.org/resources/ontology/DCM 110153}">Source Role ID</span></p><p><b>who</b>: model number ABC, serial number 1234</p><p><b>requestor</b>: false</p><h3>Networks</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Address</b></td><td><b>Type</b></td></tr><tr><td style="display: none">*</td><td>myDevice.example.com</td><td>Machine Name</td></tr></table></blockquote><blockquote><p><b>agent</b></p><p><b>type</b>: <span title="Codes:{http://dicom.nema.org/resources/ontology/DCM 110152}">Destination Role ID</span></p><p><b>who</b>: myMachine.example.org</p><p><b>requestor</b>: false</p><h3>Networks</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Address</b></td><td><b>Type</b></td></tr><tr><td style="display: none">*</td><td>http://server.example.com/fhir</td><td>URI</td></tr></table></blockquote><h3>Sources</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Site</b></td><td><b>Observer</b></td><td><b>Type</b></td></tr><tr><td style="display: none">*</td><td>mobile app foo-bar</td><td>model number ABC, serial number 1234</td><td><a href="http://hl7.org/fhir/R4/codesystem-audit-source-type.html#audit-source-type-1">Audit Event Source Type: 1</a> (User Device)</td></tr></table><blockquote><p><b>entity</b></p><p><b>what</b>: <a href="http://example.org/fhir/Patient/ex-patient">http://example.org/fhir/Patient/ex-patient</a></p><p><b>type</b>: <a href="http://hl7.org/fhir/R4/codesystem-audit-entity-type.html#audit-entity-type-1">Audit event entity type: 1</a> (Person)</p><p><b>role</b>: <a href="http://hl7.org/fhir/R4/codesystem-object-role.html#object-role-1">AuditEventEntityRole: 1</a> (Patient)</p></blockquote><blockquote><p><b>entity</b></p><p><b>what</b>: De-Identification Algorithm Identifier for FooBar De-Identification Algorithm (Identifier: <a href="http://terminology.hl7.org/5.0.0/NamingSystem-uri.html" title="As defined by RFC 3986 (http://www.ietf.org/rfc/rfc3986.txt)(with many schemes defined in many RFCs). For OIDs and UUIDs, use the URN form (urn:oid:(note: lowercase) and urn:uuid:). See http://www.ietf.org/rfc/rfc3001.txt and http://www.ietf.org/rfc/rfc4122.txt

    This oid is used as an identifier II.root to indicate the the extension is an absolute URI (technically, an IRI). Typically, this is used for OIDs and GUIDs. Note that when this OID is used with OIDs and GUIDs, the II.extension should start with urn:oid or urn:uuid:

    Note that this OID is created to aid with interconversion between CDA and FHIR - FHIR uses urn:ietf:rfc:3986 as equivalent to this OID. URIs as identifiers appear more commonly in FHIR.

    This OID may also be used in CD.codeSystem.">URI</a>/urn:uuid:bed39a2d-3212-4f24-a5c8-e4c168968057)</p><p><b>type</b>: <a href="CodeSystem-DeIdentificationEntityType.html#DeIdentificationEntityType-DeId-algorithm">Entity Type for De-Identification: DeId-algorithm</a> (De-Identification Algorithm)</p></blockquote></div>
      </text>
      <type>
        <system value="http://dicom.nema.org/resources/ontology/DCM"/>
        <code value="110106"/>
        <display value="Export"/>
      </type>
      <subtype>
        <system
                value="http://terminology.hl7.org/CodeSystem/iso-21089-lifecycle"/>
        <code value="reidentify"/>
        <display value="Re-identify Record Lifecycle Event"/>
      </subtype>
      <subtype>
        <system value="http://hl7.org/fhir/restful-interaction"/>
        <code value="read"/>
        <display value="read"/>
      </subtype>
      <action value="R"/>
      <recorded value="2025-04-29T09:49:00.000Z"/>
      <outcome value="0"/>
      <purposeOfEvent>
        <coding>
          <system value="http://terminology.hl7.org/CodeSystem/v3-ActReason"/>
          <code value="HRESCH"/>
          <display value="healthcare research"/>
        </coding>
      </purposeOfEvent>
      <agent>
        <type>
          <coding>
            <system value="http://dicom.nema.org/resources/ontology/DCM"/>
            <code value="110153"/>
            <display value="Source Role ID"/>
          </coding>
        </type>
        <who>
          <display value="model number ABC, serial number 1234"/>
        </who>
        <requestor value="false"/>
        <network>
          <address value="myDevice.example.com"/>
          <type value="1"/>
        </network>
      </agent>
      <agent>
        <type>
          <coding>
            <system value="http://dicom.nema.org/resources/ontology/DCM"/>
            <code value="110152"/>
            <display value="Destination Role ID"/>
          </coding>
        </type>
        <who>
          <display value="myMachine.example.org"/>
        </who>
        <requestor value="false"/>
        <network>
          <address value="http://server.example.com/fhir"/>
          <type value="5"/>
        </network>
      </agent>
      <source>
        <site value="mobile app foo-bar"/>
        <observer>
          <display value="model number ABC, serial number 1234"/>
        </observer>
        <type>
          <system
                  value="http://terminology.hl7.org/CodeSystem/security-source-type"/>
          <code value="1"/>
          <display value="User Device"/>
        </type>
      </source>
      <entity>
        <what>
          <reference value="http://example.org/fhir/Patient/ex-patient"/>
        </what>
        <type>
          <system
                  value="http://terminology.hl7.org/CodeSystem/audit-entity-type"/>
          <code value="1"/>
          <display value="Person"/>
        </type>
        <role>
          <system value="http://terminology.hl7.org/CodeSystem/object-role"/>
          <code value="1"/>
          <display value="Patient"/>
        </role>
      </entity>
      <entity>
        <what>
          <identifier>
            <system value="urn:ietf:rfc:3986"/>
            <value value="urn:uuid:bed39a2d-3212-4f24-a5c8-e4c168968057"/>
          </identifier>
          <display
                   value="De-Identification Algorithm Identifier for FooBar De-Identification Algorithm"/>
        </what>
        <type>
          <system
                  value="https://profiles.ihe.net/ITI/DeId/CodeSystem/DeIdentificationEntityType"/>
          <code value="DeId-algorithm"/>
        </type>
      </entity>
    </AuditEvent>