ABSTRACT

We address the shortcomings by applying redaction policies that completely or partially remove sensitive attributes of the information being shared. Such policies have been traditionally applied to text, portable document formats (PDFs), and images using tools such as Redact-It (https://www.redact-it.com/). Redaction is often required by regulations that are mandated by a company or by laws such as HIPAA. The risks of unintentional disclosure of sensitive contents of an EPR

document can be severe and costly (Heath 1997). Such risks may include litigation proceedings related to noncompliance of HIPAA regulations (Heath 1997).