De-identify Patient Data Before Using Microsoft Copilot
Patient names, dates of birth, MRNs, diagnoses, medication names, insurance IDs, and any other Protected Health Information present in clinical notes or summaries. — automatically detected and replaced with labelled placeholders before your text ever reaches Microsoft Copilot. Processing runs entirely in your browser. Zero bytes leave your device.
The EU AI Act (effective August 2026) classifies clinical AI use without data minimisation as high-risk. Violations carry fines of up to €30M or 6% of global annual turnover.
Relevant Compliance Frameworks
This use case intersects with the following regulations and standards. CleanMyPrompt is a data minimisation tool — it is not a substitute for legal advice or certified compliance software.
Why this matters for Microsoft Copilot: Microsoft 365 Copilot is covered by Microsoft's EU Data Boundary commitments; consumer Copilot is not.
What Gets Redacted — Example
Patient: Sarah Johnson, DOB 03/15/1985, MRN 00123456 Dx: Type 2 DM, HTN. A1C 8.2 on 2024-11-10.
Patient: [PERSON-NAME], DOB [DATE], MRN [REDACTED] Dx: Type 2 DM, HTN. A1C 8.2 on [DATE].
Who Uses This
- Clinicians summarising patient notes with AI
- Health IT teams building AI-assisted workflows
- Medical coders using AI for documentation
The Regulatory Risk
HIPAA requires de-identification before PHI can be disclosed to a third party including AI vendors. Consumer AI tools are not HIPAA-covered entities. Violations carry fines up to $1.9M per violation category per year.
Ready to protect your patient health data?
Zero login. Zero uploads. Works in any browser.