US De-Identified Anonymized Profiles Library (DAPL)

To complement the proposed Trust Services Implementation Guide (IG) in PSS-2663 that will define a set of services for de-identification and anonymization of FHIR data to either transform or remove protected health information (PHI) or personally identifiable information (PII) data, a set of FHIR profiles that can convey clinical data (starting with USCDI data) is needed to suppress  PHI/PII data for US-specific use cases that include federal reporting.

To achieve this, we propose an implementation guide that will define a set of profiles that aligns with USCDI and and can be used to constrain the base FHIR specification to minimize the risk of containing PHI/PII. This implementation guide will use the US Core terminology. however it is unable to directly use US Core profiles since the existing use core profiles include information to identify patients.

For example, text fields may not be allowed in the FHIR resources, and names and identifiers may not be allowed in these profiles.

This set of profiles will be used to carry the data produced by the Trust Services IG. Because these profiles are based on USCDI, they will be specific to the US Realm.

We intend the IG to be balloted in the May 2026 cycle.

This project reuses work performed under the UDS+ IG (https://www.fhir.org/guides/hrsa/uds-plus/) and the Bulk Import work stream in Argonaut.