The product can protect protected health information by directly removing the information that allows a patient to be identified or re-identified, and can provide adequate pseudonymisation, noting that pseudonymisation and any patient-identifying key permit re-identification and are not de-identification. Clinical users, service engineers and marketing can de-identify data for purposes that do not need patient identity, including scrubbing before return to the factory, architectures that allow remote service without exposing health data, and in-factory quarantine, labelling and training; extra tooling may be needed when a defective product can no longer run the function. Where removing all identifiers is undesirable, pseudonymisation protects data for research, analysis, sharing, quality control and audit, and manufacturers provide detailed, easily found information on the product's de-identification and pseudonymisation capabilities.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.