HI7969{"id":7968,"date":"2026-10-27T10:26:04","date_gmt":"2026-10-27T10:26:04","guid":{"rendered":"https:\/\/www.trinka.ai\/blog\/?p=7968"},"modified":"2026-10-27T10:26:04","modified_gmt":"2026-10-27T10:26:04","slug":"de-identified-text-isnt-always-safe-to-paste-into-ai","status":"publish","type":"post","link":"https:\/\/www.trinka.ai\/blog\/de-identified-text-isnt-always-safe-to-paste-into-ai\/","title":{"rendered":"De-Identified Text Isn’t Always Safe to Paste Into AI"},"content":{"rendered":"

Many teams follow a simple rule before using AI on clinical writing: remove the names, then paste. If the text meets HIPAA’s de-identification standard, it is no longer protected health information, so the rule feels reasonable.<\/p>\n

But a legal standard and real-world safety are not the same thing. A February 2026 position paper from NYU researchers argues that scrubbed clinical notes can still point back to individual patients, and HHS guidance acknowledges that de-identified data keeps a small, non-zero risk. Here is what to check before you paste.<\/p>\n

What HIPAA Means by “De-Identified”<\/h2>\n

The Privacy Rule recognizes two methods under 45 CFR 164.514(b). Safe Harbor<\/strong> means removing 18 categories of identifiers, covering the individual as well as relatives, employers, and household members, with no actual knowledge that the remaining information could identify someone. Expert Determination<\/strong> means a qualified expert documents that the risk of identifying an individual is very small.<\/p>\n

Once either standard is met, the data is no longer protected health information under the Privacy Rule. Neither method removes risk entirely, and HHS guidance says as much.<\/p>\n

Why Narrative Text Is Harder Than Data Tables<\/h2>\n

Safe Harbor was built with structured data in mind: fixed fields that can be deleted or generalized. Clinical and research writing is different. A draft study report, case narrative, or safety summary is free text, and identifying details can appear anywhere in it.<\/p>\n

Beyond names and ID numbers, watch for exact dates, small geographic details, rare diagnoses, unusual treatment sequences, site names, and quotes from patients or investigators. Any one of these may look harmless. Together they can narrow a pool of possible patients to one.<\/p>\n

Safe Harbor also requires that you have no actual knowledge that what remains could identify someone, so the checklist alone is not the whole test. Redacting free text, whether by hand or with software, is easy to get wrong.<\/p>\n

What the NYU Paper Adds<\/h2>\n

In February 2026, researchers at NYU posted Paradox of De-identification: A Critique of HIPAA Safe Harbour in the Age of LLMs<\/em> to arXiv. It is a position paper. The authors argue that Safe Harbor was designed for categorical, tabular data and ignores correlations between identity and quasi-identifiers that language models can capture.<\/p>\n

In their tests, a model re-identified individual patients from scrubbed clinical notes at a low rate, at most 0.34%. In a separate test, a model predicted a patient’s neighborhood from the diagnosis alone, after all other information was removed, though only modestly better than chance (about 58.6% AUC). The authors’ point is structural: even small rates show a gap that the Safe Harbor checklist does not close.<\/p>\n

Keep the limits in view. This is not a regulatory finding, and it does not change what HIPAA requires. It suggests that “de-identified” is a compliance status, not a promise of anonymity.<\/p>\n

What De-Identification Does Not Protect<\/h2>\n

HIPAA de-identification is about patient privacy. It does not cover unpublished study results, sponsor-confidential information, unreleased protocol details, regulatory strategy, or other intellectual property. A fully scrubbed clinical study report can still be commercially confidential.<\/p>\n

It also does not answer a separate question: what the AI tool does with your text. Many tools store prompts, and some use them to improve their models, depending on the plan and settings. Contracts, institutional policies, and state or international privacy laws may set stricter rules than HIPAA.<\/p>\n

A Quick Check Before You Paste<\/h2>\n

Before pasting clinical text into an AI tool, ask:<\/p>\n