Compliance
Insurance review prep
Strip non-essential identifiers and package a study for third-party insurance review.
Problem
An insurance company requests imaging for claims review. The export must contain only the minimum necessary PHI — typically a Limited Dataset (dates allowed, direct identifiers removed). You need to produce a compliant export that satisfies both HIPAA and insurer requirements.
Steps
- Open the DICOM file — click Open files… (⌘O) and load the relevant study.
- Switch to Anonymization mode — click the Anon tab (⌘2).
- Select Limited Dataset profile — pick “Limited Dataset” from the profile picker. This removes 16 of 18 HIPAA identifiers but retains dates.
- Review the PHI map — toggle Show only PHI to see which tags will be modified. Dates (Study Date, Patient Birth Date if shifted) should remain.
- Apply — click Apply & Export. The exported file contains no direct identifiers.
- Verify — load the exported file. Confirm PatientName is cleared, PatientID is pseudonymized, but StudyDate and related temporal tags are preserved.
- Audit trail — the audit log in the right rail records the anonymization action with timestamp and profile used.
Expected Result
- Direct identifiers (PatientName, PatientID) are removed or pseudonymized.
- Temporal tags (StudyDate, SeriesDate) are preserved for claims processing.
- Modality, Body Part, and Study Description remain for procedure verification.
- The audit log records the exact profile, timestamp, and tags modified.
- The export is HIPAA-compliant for insurance disclosure.