search

CDCgov / prime-reportstream

ReportStream is a public intermediary tool for delivery of data between different parts of the healthcare ecosystem.
https://reportstream.cdc.gov
Creative Commons Zero v1.0 Universal
71 stars 39 forks source link

De-identify all resource identifiers in a FHIR bundle #15860

Open victor-chaparro opened 3 weeks ago

victor-chaparro commented 3 weeks ago

User Story

As ReportStream, I need the ability to de-identify all references that may contain PII in a FHIR bundle

Description/Use Case

Some PII identifiers are stored inside a Resource's fullUrl and that fullURL is used to reference the resource such as the Patient resource. There's currently no way to de-identify a resource's fullURL and update everywhere that fullURL is referenced using FHIR transforms.

In the screenshots below you can see the Patient's identifier (which is considered PII) being used inside the fullUrl and used to reference it.

image.png image.png

Dev Notes

Ideally, we'd want the identifier be replaced with another random UUID so that we're still able to reference the resource in other places with the same UUID.

Acceptance Criteria

arnejduranovic commented 3 days ago

Need more requirements and insight to where this need comes from and if it is aligned with FHIR best practices.