De-identification of Patient Notes with Recurrent Neural Networks
Not on the map. Why?
Abstract (arXiv)
Objective: Patient notes in electronic health records (EHRs) may contain critical information for medical investigations. However, the vast majority of medical investigators can only access de-identified notes, in order to protect the confidentiality of patients. In the United States, the Health Insurance Portability and Accountability Act (HIPAA) defines 18 types of protected health information (PHI) that needs to be removed to de-identify patient notes. Manual de-identification is impractical given the size of EHR databases, the limited number of researchers with access to the non-de-identified notes, and the frequent mistakes of human annotators. A reliable automated de-identification system would consequently be of high value. Materials and Methods: We introduce the first de-identification system based on artificial neural networks (ANNs), which requires no handcrafted features or rules, unlike existing systems. We compare the performance of the system with state-of-the-art systems on two datasets: the i2b2 2014 de-identification challenge dataset, which is the largest publicly available de-identification dataset, and the MIMIC de-identification dataset, which we assembled and is twice as large as the i2b2 2014 dataset. Results: Our ANN model outperforms the state-of-the-art systems. It yields an F1-score of 97.85 on the i2b2 2014 dataset, with a recall 97.38 and a precision of 97.32, and an F1-score of 99.23 on the MIMIC de-identification dataset, with a recall 99.25 and a precision of 99.06. Conclusion: Our findings support the use of ANNs for de-identification of patient notes, as they show better performance than previously published systems while requiring no feature engineering.
Key facts. Cited by 88 papers in the map (data through 7 Oct 2026). First posted on arXiv 10 Jun 2016.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 14; 2022: 15; 2023: 13; 2024: 16; 2025: 14; 2026: 16.
88 papers.
Sort:
By area:
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Modelscited by 424
- 2022What Does it Mean for a Language Model to Preserve Privacy?cited by 194
- 2022Quantifying Privacy Risks of Masked Language Models Using Membership Inference Attackscited by 168
- 2022The Text Anonymization Benchmark (TAB): A Dedicated Corpus and Evaluation Framework for Text Anonymizationcited by 94
- 2024Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systemscited by 63
- 2023Reducing Privacy Risks in Online Self-Disclosures with Language Modelscited by 47
- 2021Neural Natural Language Processing for Unstructured Data in Electronic Health Records: a Reviewcited by 35
- 2023Identifying and Mitigating Privacy Risks Stemming from Language Models: A Surveycited by 30
- 2024Learnable Privacy Neurons Localization in Language Modelscited by 26
- 2024Large Language Models are Advanced Anonymizerscited by 22
- 2024From Text to Transformation: A Comprehensive Review of Large Language Models' Versatilitycited by 19
- 2021How Good Is NLP? A Sober Look at NLP Tasks through the Lens of Social Impactcited by 18
38 more
- 2023Privacy- and Utility-Preserving NLP with Anonymized Data: A case study of Pseudonymizationcited by 18
- 2023Are Chatbots Ready for Privacy-Sensitive Applications? An Investigation into Input Regurgitation and Prompt-Induced Sanitizationcited by 17
- 2022How to keep text private? A systematic review of deep learning methods for privacy-preserving natural language processingcited by 16
- 2024MEOW: MEMOry Supervised LLM Unlearning Via Inverted Factscited by 16
- 2023De-identification of clinical free text using natural language processing: A systematic review of current approachescited by 13
- 2021De-identification of Privacy-related Entities in Job Postingscited by 12
- 2023Enhancing Small Medical Learners with Privacy-preserving Contextual Promptingcited by 11
- 2022Graph-Text Multi-Modal Pre-training for Medical Representation Learningcited by 10
- 2024Protecting Privacy Through Approximating Optimal Parameters for Sequence Unlearning in Language Modelscited by 10
- 2023In the Name of Fairness: Assessing the Bias in Clinical Record De-identificationcited by 9
- 2022Bootstrapping Text Anonymization Models with Distant Supervisioncited by 8
- 2022Behind the Mask: Demographic bias in name detection for PII maskingcited by 7
- 2023SAIC: Integration of Speech Anonymization and Identity Classificationcited by 7
- 2024Unlocking the Potential of Large Language Models for Clinical Text Anonymization: A Comparative Studycited by 7
- 2025PII-Bench: Evaluating Query-Aware Privacy Protection Systemscited by 7
- 2024The Empirical Impact of Data Sanitization on Language Modelscited by 6
- 2025Automated Privacy Information Annotation in Large Language Model Interactionscited by 6
- 2021Transferability of Neural Network Clinical De-identification Systemscited by 5
- 2022Few-Shot Cross-lingual Transfer for Coarse-grained De-identification of Code-Mixed Clinical Textscited by 5
- 2022A Comparative Evaluation Of Transformer Models For De-Identification Of Clinical Text Datacited by 5
- 2023Validating transformers for redaction of text from electronic health records in real-world healthcarecited by 4
- 2023Neural Text Sanitization with Privacy Risk Indicators: An Empirical Analysiscited by 4
- 2021Interpretable bias mitigation for textual data: Reducing gender bias in patient notes while maintaining classification performancecited by 3
- 2021Named Entity Recognition in Unstructured Medical Text Documentscited by 3
- 2022De-Identification of French Unstructured Clinical Notes for Machine Learning Taskscited by 3
- 2023Development and validation of a natural language processing algorithm to pseudonymize documents in the context of a clinical data warehousecited by 3
- 2024Cloaked Classifiers: Pseudonymization Strategies on Sensitive Classification Taskscited by 3
- 2024WPN: An Unlearning Method Based on N-pair Contrastive Learning in Language Modelscited by 3
- 2024Synthetic4Health: Generating Annotated Synthetic Clinical Letterscited by 3
- 2025Re-identification of De-identified Documents with Autoregressive Infillingcited by 3
- 2025Not What the Doctor Ordered: Surveying LLM-based De-identification and Quantifying Clinical Information Losscited by 3
- 2025Towards Automatic Evaluation and Selection of PHI De-identification Models via Multi-Agent Collaborationcited by 3
- 2021De-identifying Australian Hospital Discharge Summaries: An End-to-End Framework using Ensemble of Deep Learning Modelscited by 2
- 2021An Analysis Of Protected Health Information Leakage In Deep-Learning Based De-Identification Algorithmscited by 2
- 2021A Context-Enhanced De-identification Systemcited by 2
- 2021A Conversational Agent System for Dietary Supplements Usecited by 2
- 2021De-identification of Unstructured Clinical Texts from Sequence to Sequence Perspectivecited by 2
- 2022Unintended Memorization and Timing Attacks in Named Entity Recognition Modelscited by 2
50 most cited of 88 All 88 (JSON)
- 2026Integrating knowledge from case reports: a medical ontology based multimodal information system with structured summary17 Sep 2026
- 2026Institution-Specific LLM Prompting Recovers PHI That De-identification Systems and Their Gold Standards Both Miss17 Aug 2026
- 2026Surrogate Substitution Preserves PHI Detectability: A Multi-Detector Equivalence Study4 Aug 2026
- 2026DialogPII: A multilingual dataset of synthetic dialog transcripts to detect personal information29 Jun 2026
- 2026LLM Anonymization Against Agentic Re-Identification29 May 2026
- 2026Vectors Are Not Neutral: Sensitive-Information Inference from Exported LLM Representations in Summarization26 May 2026
- 2026Language corpora for the Dutch medical domain28 Apr 2026
- 2026Differentially Private De-identification of Dutch Clinical Notes: A Comparative Evaluation23 Apr 2026
- 2026BodhiPromptShield: Pre-Inference Prompt Mediation for Surface-Form Privacy Propagation in LLM Agent Pipelines7 Apr 2026
- 2026Not All Entities are Created Equal: A Dynamic Anonymization Framework for Privacy-Preserving RAG27 Mar 2026
- 2026PARHAF, a human-authored corpus of clinical reports for fictitious patients in French20 Mar 2026
- 2026SplitAgent: A Privacy-Preserving Distributed Architecture for Enterprise-Cloud Agent Collaboration9 Mar 2026
38 more
- 2026Transparency-First Medical Language Models: Datasheets, Model Cards, and End-to-End Data Provenance for Clinical NLP27 Jan 2026
- 2026Anonpsy: A Graph-Based Framework for Structure-Preserving De-identification of Psychiatric Narratives20 Jan 2026
- 2026Synthetic Data for Veterinary EHR De-identification: Benefits, Limits, and Safety Trade-offs Under Fixed Compute13 Jan 2026
- 2026LLMs-Integrated Automatic Hate Speech Recognition Using Controllable Text Generation Models8 Jan 2026
- 2025Improving the Performance of Radiology Report De-identification with Large-Scale Training and Benchmarking Against Cloud Vendor Methods6 Nov 2025
- 2025Towards Automatic Evaluation and Selection of PHI De-identification Models via Multi-Agent Collaboration17 Oct 2025
- 2025JEDA: Query-Free Clinical Order Search from Ambient Dialogues16 Oct 2025
- 2025Stronger Re-identification Attacks through Reasoning and Aggregation10 Oct 2025
- 2025Protecting De-identified Documents from Search-based Linkage Attacks7 Oct 2025
- 2025Scalable multilingual PII annotation for responsible AI in LLMs3 Oct 2025
- 2025Not What the Doctor Ordered: Surveying LLM-based De-identification and Quantifying Clinical Information Loss17 Sep 2025
- 2025Cross-Domain Transfer and Few-Shot Learning for Personal Identifiable Information Recognition16 Jul 2025
- 2025Thunder-DeID: Accurate and Efficient De-identification Framework for Korean Court Judgments18 Jun 2025
- 2025Automated Privacy Information Annotation in Large Language Model Interactions27 May 2025
- 2025Re-identification of De-identified Documents with Autoregressive Infilling19 May 2025
- 2025Large Language Model Empowered Privacy-Protected Framework for PHI Annotation in Clinical Notes22 Apr 2025
- 2025PII-Bench: Evaluating Query-Aware Privacy Protection Systems25 Feb 2025
- 2025Towards Privacy-aware Mental Health AI Models: Advances, Challenges, and Opportunities1 Feb 2025
- 2024The Empirical Impact of Data Sanitization on Language Models8 Nov 2024
- 2024DeIDClinic: A Risk-Aware Pseudonymization Framework for Clinical Text De-identification and Re-identification Risk Assessment2 Oct 2024
- 2024MEOW: MEMOry Supervised LLM Unlearning Via Inverted Facts18 Sep 2024
- 2024Synthetic4Health: Generating Annotated Synthetic Clinical Letters14 Sep 2024
- 2024WPN: An Unlearning Method Based on N-pair Contrastive Learning in Language Models18 Aug 2024
- 2024Building an Ethical and Trustworthy Biomedical AI Ecosystem for the Translational and Clinical Integration of Foundational Models18 Jul 2024
- 2024Generation and De-Identification of Indian Clinical Discharge Summaries using LLMs8 Jul 2024
- 2024Cloaked Classifiers: Pseudonymization Strategies on Sensitive Classification Tasks25 Jun 2024
- 2024Protecting Privacy Through Approximating Optimal Parameters for Sequence Unlearning in Language Models20 Jun 2024
- 2024AspirinSum: an Aspect-based utility-preserved de-identification Summarization framework20 Jun 2024
- 2024Unlocking the Potential of Large Language Models for Clinical Text Anonymization: A Comparative Study29 May 2024
- 2024Learnable Privacy Neurons Localization in Language Models16 May 2024
- 2024Silencing the Risk, Not the Whistle: A Semi-automated Text Sanitization Tool for Mitigating the Risk of Whistleblower Re-Identification2 May 2024
- 2024From Text to Transformation: A Comprehensive Review of Large Language Models' Versatility25 Feb 2024
- 2024Large Language Models are Advanced Anonymizers21 Feb 2024
- 2024Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systems11 Jan 2024
- 2023SAIC: Integration of Speech Anonymization and Identity Classification23 Dec 2023
- 2023De-identification of clinical free text using natural language processing: A systematic review of current approaches28 Nov 2023
- 2023Reducing Privacy Risks in Online Self-Disclosures with Language Models16 Nov 2023
- 2023Neural Text Sanitization with Privacy Risk Indicators: An Empirical Analysis22 Oct 2023
50 newest of 88 All 88 (JSON)
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Modelscited by 424
- 2022Quantifying Privacy Risks of Masked Language Models Using Membership Inference Attackscited by 168
- 2024MEOW: MEMOry Supervised LLM Unlearning Via Inverted Factscited by 16
- 2024Protecting Privacy Through Approximating Optimal Parameters for Sequence Unlearning in Language Modelscited by 10
- 2024WPN: An Unlearning Method Based on N-pair Contrastive Learning in Language Modelscited by 3
- 2022Unintended Memorization and Timing Attacks in Named Entity Recognition Modelscited by 2
- 2024MEOW: MEMOry Supervised LLM Unlearning Via Inverted Facts18 Sep 2024
- 2024WPN: An Unlearning Method Based on N-pair Contrastive Learning in Language Models18 Aug 2024
- 2024Protecting Privacy Through Approximating Optimal Parameters for Sequence Unlearning in Language Models20 Jun 2024
- 2022Unintended Memorization and Timing Attacks in Named Entity Recognition Models4 Nov 2022
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct 2022
- 2022Quantifying Privacy Risks of Masked Language Models Using Membership Inference Attacks8 Mar 2022
- 2025Towards Automatic Evaluation and Selection of PHI De-identification Models via Multi-Agent Collaborationcited by 3
- 2026BodhiPromptShield: Pre-Inference Prompt Mediation for Surface-Form Privacy Propagation in LLM Agent Pipelinescited by 0
- 2026LLM Anonymization Against Agentic Re-Identificationcited by 0
- 2026LLM Anonymization Against Agentic Re-Identification29 May 2026
- 2026BodhiPromptShield: Pre-Inference Prompt Mediation for Surface-Form Privacy Propagation in LLM Agent Pipelines7 Apr 2026
- 2025Towards Automatic Evaluation and Selection of PHI De-identification Models via Multi-Agent Collaboration17 Oct 2025
- 2022What Does it Mean for a Language Model to Preserve Privacy?cited by 194
- 2022The Text Anonymization Benchmark (TAB): A Dedicated Corpus and Evaluation Framework for Text Anonymizationcited by 94
- 2024Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systemscited by 63
- 2023Reducing Privacy Risks in Online Self-Disclosures with Language Modelscited by 47
- 2021Neural Natural Language Processing for Unstructured Data in Electronic Health Records: a Reviewcited by 35
- 2023Identifying and Mitigating Privacy Risks Stemming from Language Models: A Surveycited by 30
- 2024Learnable Privacy Neurons Localization in Language Modelscited by 26
- 2024Large Language Models are Advanced Anonymizerscited by 22
- 2024From Text to Transformation: A Comprehensive Review of Large Language Models' Versatilitycited by 19
- 2021How Good Is NLP? A Sober Look at NLP Tasks through the Lens of Social Impactcited by 18
- 2023Privacy- and Utility-Preserving NLP with Anonymized Data: A case study of Pseudonymizationcited by 18
- 2023Are Chatbots Ready for Privacy-Sensitive Applications? An Investigation into Input Regurgitation and Prompt-Induced Sanitizationcited by 17
12 most cited of 77 All 77 (JSON)
- 2026Integrating knowledge from case reports: a medical ontology based multimodal information system with structured summary17 Sep 2026
- 2026Institution-Specific LLM Prompting Recovers PHI That De-identification Systems and Their Gold Standards Both Miss17 Aug 2026
- 2026Surrogate Substitution Preserves PHI Detectability: A Multi-Detector Equivalence Study4 Aug 2026
- 2026DialogPII: A multilingual dataset of synthetic dialog transcripts to detect personal information29 Jun 2026
- 2026Vectors Are Not Neutral: Sensitive-Information Inference from Exported LLM Representations in Summarization26 May 2026
- 2026Language corpora for the Dutch medical domain28 Apr 2026
- 2026Differentially Private De-identification of Dutch Clinical Notes: A Comparative Evaluation23 Apr 2026
- 2026PARHAF, a human-authored corpus of clinical reports for fictitious patients in French20 Mar 2026
- 2026SplitAgent: A Privacy-Preserving Distributed Architecture for Enterprise-Cloud Agent Collaboration9 Mar 2026
- 2026Transparency-First Medical Language Models: Datasheets, Model Cards, and End-to-End Data Provenance for Clinical NLP27 Jan 2026
- 2026Anonpsy: A Graph-Based Framework for Structure-Preserving De-identification of Psychiatric Narratives20 Jan 2026
- 2026LLMs-Integrated Automatic Hate Speech Recognition Using Controllable Text Generation Models8 Jan 2026
12 newest of 77 All 77 (JSON)