The PHI/PII validation code is currently flagging anonymized DICOM values where the reported value consists only of repeated X-only characters. These should be treated as anonymized values rather than potential PHI/PII.
Examples from the UPMC report:
- OtherPatientIDs: XXXXXXXX
- ReferringPhysicianName: XXXXXXXX
- AdditionalPatientHistory: XXXXXXXXXX
- RequestingPhysician: XXXXXXXX
Update the PHI/PII validation logic so values consisting only of one or more X characters are considered valid/anonymized and are not reported as PHI/PII findings.
Acceptance criteria:
- Values such as X, XX, XXX, XXXXXXXX, and XXXXXXXXXX are not reported as PHI/PII.
- The UPMC examples above are excluded from PHI/PII findings after the code update.
- Values such as X123, JOHN X, XXX-12-3456, or X_KINCAID are still reviewed or flagged as appropriate.
Examples Rows from UPMC Report where this is occurring:
<style>
</style>
The PHI/PII validation code is currently flagging anonymized DICOM values where the reported value consists only of repeated X-only characters. These should be treated as anonymized values rather than potential PHI/PII.
Examples from the UPMC report:
Update the PHI/PII validation logic so values consisting only of one or more X characters are considered valid/anonymized and are not reported as PHI/PII findings.
Acceptance criteria:
Examples Rows from UPMC Report where this is occurring:
<style> </style>