{
  "description": null,
  "_filename": "CodeSystem-de-identification-method.json",
  "package_name": "io.health-samurai.core.r5",
  "date": null,
  "publisher": null,
  "content": "complete",
  "name": "DeIdentificationMethod",
  "type": null,
  "experimental": null,
  "resourceType": "CodeSystem",
  "title": "De-Identification Method",
  "package_version": "0.2604.1",
  "status": "active",
  "id": "07aa927f-808e-4576-a27b-9b34ea99e9a8",
  "kind": null,
  "url": "http://health-samurai.io/fhir/core/CodeSystem/de-identification-method",
  "concept": [ {
    "code": "redact",
    "display": "Redact",
    "definition": "Remove the value entirely (returns NULL)."
  }, {
    "code": "keep",
    "display": "Keep",
    "definition": "Preserve the value as-is (no transformation)."
  }, {
    "code": "cryptoHash",
    "display": "Crypto Hash",
    "definition": "Replace with HMAC-SHA256 hex string. Requires cryptoHashKey parameter."
  }, {
    "code": "dateshift",
    "display": "Date Shift",
    "definition": "Shift date/dateTime by a deterministic offset derived from HMAC(dateShiftKey, resource.id). Offset range is [-50, 50] days. Year-only and year-month values are redacted. Requires dateShiftKey parameter."
  }, {
    "code": "birthDateSafeHarbor",
    "display": "Birth Date (Safe Harbor)",
    "definition": "Intended only for Patient.birthDate. Same as dateshift but redacts the value entirely when the patient is over 89 years old, per HIPAA Safe Harbor 45 CFR 164.514(b)(2)(i)(C). Applying it to any other date column is semantically incorrect — the function computes `age(today, input)` and treats the input as a birth date. Requires dateShiftKey parameter."
  }, {
    "code": "encrypt",
    "display": "Encrypt",
    "definition": "AES-128-CBC encrypt and base64 encode. Requires encryptKey parameter."
  }, {
    "code": "substitute",
    "display": "Substitute",
    "definition": "Replace with a fixed value. Requires replaceWith parameter."
  }, {
    "code": "perturb",
    "display": "Perturb",
    "definition": "Add random noise to a numeric value. Optional parameters: span (default 1.0), rangeType (default fixed), roundTo (default 0)."
  }, {
    "code": "custom_function",
    "display": "Custom Function",
    "definition": "Apply a user-provided PostgreSQL function. Requires custom_function parameter (function name). Optional custom_arg parameter passed as second argument. Function must accept text as first argument."
  } ],
  "version": "0.2604.1"
}