De-identification Best Practices: Protecting Patient Privacy in Your Logbook

The safest clinical logbook is one that captures learning without capturing identity.

De-identification isn't only about compliance—it's about professionalism, trust, and protecting patients. If you build the habit correctly, it becomes effortless.

What "de-identified" means in practice

A de-identified log entry should not include anything that can directly or indirectly identify a patient.

Never include:

• patient name or initials
• MRN / file number
• phone number, email, address
• date of birth or exact age if rare context makes them identifiable
• exact timestamps tied to a known event
• bed number + ward + unique details that make a person obvious
• identifiable facial photos
• consent forms, labels, wristbands, radiology request forms with identifiers

A simple replacement method that still keeps learning value

Use structured, anonymous descriptors:

Instead of: "Ahmed, 42 y/o, MRN 12345, seen at 10:12 PM…"

Write: "Adult male, middle-aged, presented with acute RUQ pain; ultrasound confirmed cholecystitis…"

Instead of: "Lives in JBR tower 7…"

Write: "Urban resident; no relevant social risk factors disclosed."

Use age bands

• child / adolescent / young adult / adult / older adult
• or a broad range: "30s", "40s", "60+"

Media uploads: the highest-risk area

Most privacy breaches happen through images.

Before you upload photos or videos:

Perform a quick checklist:

1) Is any text visible?

• labels, screens, MRNs, names on monitors
• paper notes in the background

2) Are faces visible?

• patient face
• family members
• staff name badges

3) Is the environment identifiable?

• unique hospital signage
• bed labels
• room numbers

If yes: don't upload until it's properly de-identified.

What to record instead (safe + meaningful)

You can still capture deep learning with:

• diagnosis reasoning
• differential diagnosis
• investigation interpretation
• procedure steps (without identifiers)
• complication management
• post-op plan
• key learning points
• supervisor feedback (general)

Example (safe procedure note)

• Procedure: "Laparoscopic appendectomy"
• Role: "Assisted + performed port placement under supervision"
• Key steps: "identified appendix, mesoappendix control, specimen retrieval"
• Outcome: "uncomplicated, stable recovery"
• Reflection: "improved trocar positioning, better camera handling"

No identity needed.

Common mistakes clinicians make

Mistake 1: "Only the initials"

Initials are still identifying information. Avoid.

Mistake 2: Screenshots of imaging systems

PACS screenshots often include patient identifiers. If you must reference imaging: document the finding in text and remove identifiers completely before any upload.

Mistake 3: "Rare case" over-detailing

Rare cases can be identifiable with too much context. Keep it broad: avoid exact times/locations and uncommon personal details.

ClinFolio's de-identification policy

ClinFolio is built around a strict principle:

Your logbook is for learning and evidence—without patient identity.

When creating entries:

• keep it generalised
• use templates that encourage de-identified structure
• upload media only after verifying no identifiers are present
• use supervisor comments focused on competency, not identity

ClinFolio is a logbook tool, not an EMR. Do not store patient identifiers.

A 15-second self-check before saving

Ask yourself:

1. Could someone identify the patient from this entry?
2. Could a colleague match this to a specific case?
3. Would I be comfortable if this entry was audited?

If the answer is anything other than "no," revise.

Want safer logging habits built into your workflow? ClinFolio templates are designed to help you log fast while staying de-identified by default.