What problem does it solve?
PHI redaction patterns for FHIR resources following HIPAA Safe Harbor. Use when:
(1) Redacting patient health information from FHIR resources before AI agent access,
(2) Implementing de-identification for clinical data pipelines,
(3) Understanding what fields are stripped, masked, or truncated in FHIR resources,
(4) Building read paths that automatically protect patient privacy.
Core Features & Use Cases
All redaction is applied at read time, not at storage time. Redacts PHI fields in FHIR resources when read through MCP or data pipelines.
- Names: Given names truncated to initials; Family names kept; Text narratives removed
- Identifiers: Values masked to last 4 characters; System and type kept
- Addresses: Lines/text removed; City/State/Country kept
- Birth Date: Truncated to year only
- Telecommunication: Values redacted; System/Use kept
- Photos: Removed entirely
- Notes/Comments: Replaced with [Redacted]
- Contained resources: Redacted recursively
- Read paths: Applied to direct reads, searches, and context envelopes
Quick Start
Integrate this redaction profile into your FHIR MCP guardrail stack to automatically redact PHI on all read paths.