phi-redaction

What problem does it solve?

PHI redaction patterns for FHIR resources following HIPAA Safe Harbor. Use when: (1) Redacting patient health information from FHIR resources before AI agent access, (2) Implementing de-identification for clinical data pipelines, (3) Understanding what fields are stripped, masked, or truncated in FHIR resources, (4) Building read paths that automatically protect patient privacy.

Core Features & Use Cases

All redaction is applied at read time, not at storage time. Redacts PHI fields in FHIR resources when read through MCP or data pipelines.

• Names: Given names truncated to initials; Family names kept; Text narratives removed
• Identifiers: Values masked to last 4 characters; System and type kept
• Addresses: Lines/text removed; City/State/Country kept
• Birth Date: Truncated to year only
• Telecommunication: Values redacted; System/Use kept
• Photos: Removed entirely
• Notes/Comments: Replaced with [Redacted]
• Contained resources: Redacted recursively
• Read paths: Applied to direct reads, searches, and context envelopes

Quick Start

Integrate this redaction profile into your FHIR MCP guardrail stack to automatically redact PHI on all read paths.