Records / De-identification rules
An evidence file for every release, with an expiry
Each run writes a report into the copy: the engine and dictionary versions, what was replaced by kind, the tables' smallest groups, what the second check and the human review found, and the checks passed or open. The certificate joins it. It expires after a year, or sooner when the data, the recipient, the purpose or the known attacks change.
Dated 7 Jul 2026Source checked 15 Oct 2026Page out of reach at the last check, 16 Oct 2026Basis: our standard
In the source's own words
“the Rule does require that the methods and results of the analysis that justify the determination be documented and made available to OCR upon request.”
Where it was read
Also read from the same source
- Several kinds of evidence, never one detector
- Stand-ins from a secret key you keep, never a plain hash
- Details that identify together are coarsened and measured
- Content is screened as well as names
- Every mention of a person, or the person is not protected
- An independent provider tests and certifies before each transfer
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in these 2 guides