Deidentification Privacy

---
name: deidentification-privacy
description: "Router for local-first PII and PHI extraction, de-identification,
  reversible re-identification, date shifting, surrogate generation,
  streaming/batch redaction, and audit-safe outputs."
disable-model-invocation: true
metadata:
  disco-role: operating
license: Apache 2.0
---

# De-identification and privacy

Use this sub-skill for local-first PII/PHI workflows that need:
- `extract_pii` spans, labels, offsets, and confidences;
- `deidentify` text redaction with masking, removal, replacement, hashing, date shifting, or format-preserving output;
- `reidentify` when an authorized mapping is available;
- policy profiles, surrogate generation, patient-keyed date shifts, audit-safe outputs, multilingual or code-mixed identifiers, and no-PHI logging;
- document, streaming, and batch redaction over synthetic or authorized text.

## Go here first

- Need entity interpretation, model selection, or clinical grounding? Use sibling `clinical-extraction-grounding`.
- Need table/row release risk or structured de-identification? Use sibling `structured-risk-evaluation`.
- Need OCR or document intake before redaction? Use sibling `multimodal-document-intake`.
- Need service, adapter, or FHIR/OMOP handoff? Use sibling `interoperability-serving`.

## Core surfaces

- Top-level APIs: `extract_pii`, `deidentify`, `reidentify`
- Privacy helpers: `openmed.core.anonymizer`, `openmed.core.date_shift`, `openmed.core.surrogate_vault`
- Long-text helpers: `openmed.core.document_stream`, `openmed.core.streaming`
- Batch helpers: `openmed.processing.BatchProcessor`

## Default operating rules

- Keep inputs synthetic or already authorized.
- Prefer local loaders, cached checkpoints, and explicit policy names.
- Never log raw source text, mappings, prompts, or PHI-bearing outputs.
- If the task needs re-identification, treat the mapping as sensitive as the source.
- For long documents, stream or batch rather than loading everything into memory.

## Bundled references

- `references/privacy-workflows.md`
- `references/api-reference.md`
- `references/troubleshooting.md`
- `scripts/deidentify_synthetic_note.py`