Skip to content

Enum: DeidentificationRegulatoryFrameworkEnum

Regulations and standards that define when medical imaging data is considered de-identified. Under HIPAA, full-face photographs and comparable images are direct identifiers; under the GDPR, facial images are biometric personal data requiring special handling.

URI: valuesets:DeidentificationRegulatoryFrameworkEnum

View in BioPortal

Permissible Values

Value Title Meaning Description Citation Jurisdiction
HIPAA_SAFE_HARBOR HIPAA Safe Harbor US HIPAA Privacy Rule method requiring removal of 18 specified identifier types, including full-face photographs and comparable images 45 CFR 164.514(b)(2) United States
HIPAA_EXPERT_DETERMINATION HIPAA Expert Determination US HIPAA Privacy Rule method in which a qualified expert determines that the risk of re-identification is very small 45 CFR 164.514(b)(1) United States
GDPR_ANONYMISATION Anonymization NCIT:C142392 Irreversible processing such that the data subject is no longer identifiable, taking the data outside the scope of the EU General Data Protection Regulation European Union
GDPR_PSEUDONYMISATION Pseudonymization NCIT:C142654 Processing so that data can no longer be attributed to a subject without additional information kept separately, as defined in GDPR Article 4(5) European Union
DICOM_PS3_15_CONFIDENTIALITY_PROFILE DICOM PS3.15 Attribute Confidentiality Profile The DICOM standard's own de-identification profile and options, designed to satisfy known regulations international
MIDI_TASK_GROUP_RECOMMENDATIONS MIDI Task Group best practices Best practices and recommendations of the Medical Image De-Identification (MIDI) Task Group (Clunie et al.) international

Slots

Name Description
deidentification_regulatory_framework The regulation or standard under which data is de-identified

Identifier and Mapping Information

Schema Source

  • from schema: https://w3id.org/valuesets

LinkML Source

name: DeidentificationRegulatoryFrameworkEnum
instantiates:
- valuesets_meta:ValueSetEnumDefinition
description: Regulations and standards that define when medical imaging data is considered
  de-identified. Under HIPAA, full-face photographs and comparable images are direct
  identifiers; under the GDPR, facial images are biometric personal data requiring
  special handling.
title: De-identification Regulatory Framework
from_schema: https://w3id.org/valuesets
contributors:
- orcid:0000-0002-6601-2165
- https://github.com/anthropics/claude-code
status: DRAFT
rank: 1000
permissible_values:
  HIPAA_SAFE_HARBOR:
    text: HIPAA_SAFE_HARBOR
    description: US HIPAA Privacy Rule method requiring removal of 18 specified identifier
      types, including full-face photographs and comparable images
    annotations:
      jurisdiction:
        tag: jurisdiction
        value: United States
      citation:
        tag: citation
        value: 45 CFR 164.514(b)(2)
    title: HIPAA Safe Harbor
  HIPAA_EXPERT_DETERMINATION:
    text: HIPAA_EXPERT_DETERMINATION
    description: US HIPAA Privacy Rule method in which a qualified expert determines
      that the risk of re-identification is very small
    annotations:
      jurisdiction:
        tag: jurisdiction
        value: United States
      citation:
        tag: citation
        value: 45 CFR 164.514(b)(1)
    title: HIPAA Expert Determination
  GDPR_ANONYMISATION:
    text: GDPR_ANONYMISATION
    description: Irreversible processing such that the data subject is no longer identifiable,
      taking the data outside the scope of the EU General Data Protection Regulation
    meaning: NCIT:C142392
    annotations:
      jurisdiction:
        tag: jurisdiction
        value: European Union
    title: Anonymization
    aliases:
    - GDPR anonymisation
  GDPR_PSEUDONYMISATION:
    text: GDPR_PSEUDONYMISATION
    description: Processing so that data can no longer be attributed to a subject
      without additional information kept separately, as defined in GDPR Article 4(5)
    meaning: NCIT:C142654
    annotations:
      jurisdiction:
        tag: jurisdiction
        value: European Union
    title: Pseudonymization
    aliases:
    - GDPR pseudonymisation
  DICOM_PS3_15_CONFIDENTIALITY_PROFILE:
    text: DICOM_PS3_15_CONFIDENTIALITY_PROFILE
    description: The DICOM standard's own de-identification profile and options, designed
      to satisfy known regulations
    annotations:
      jurisdiction:
        tag: jurisdiction
        value: international
    title: DICOM PS3.15 Attribute Confidentiality Profile
  MIDI_TASK_GROUP_RECOMMENDATIONS:
    text: MIDI_TASK_GROUP_RECOMMENDATIONS
    description: Best practices and recommendations of the Medical Image De-Identification
      (MIDI) Task Group (Clunie et al.)
    annotations:
      jurisdiction:
        tag: jurisdiction
        value: international
    title: MIDI Task Group best practices