Simply removing direct and indirect personal identifiers isn’t enough to achieve de-identification of a dataset
” Developed by the agency’s Office for Civil Rights – coincidentally known by the acronym OCR – it focuses on the removal of personal identifiers from people’s “protected health information