Patient note deidentification using a find-and-replace iterative process.

Medical research relies on access to clinical data. Health Insurance Portability and Accountability Act regulations require that patient information required for clinical research not have data that can be used to identify the patients from whose medical records the information has been derived. The only exception would be an institutional review board (IRB)-approved study for which the researcher has obtained a waiver to use patient data for a research study.