PDI Med · Physician Independence Letter
← Back
Instructions: Fill in your name, institution, and date below. Print this page or use your browser's "Save as PDF" option. Present to your IT department, compliance office, or department chair.
PDI Med Physician Documentation Access Letter
Physician Driven Innovations, LLC
dan@pdi-med.com
pdi-med.com
Date:
Physician Name (print and sign)
Institution / Health System
Department

To Whom It May Concern:

This letter addresses the access rights of the above-named physician to their own clinical documentation for the purpose of ABOG board certification case log collection, using PDI Med — a HIPAA-compliant clinical intelligence platform.

The physician's workflow involves copying text from clinical notes they authored within your electronic health record (EHR/EMR) system, and pasting that text into PDI Med for structured case log processing. This workflow is lawful, protected under federal regulation, and does not constitute a violation of any applicable privacy, data security, or intellectual property statute.

Regarding intellectual property: Clinical documentation authored by a physician in the course of patient care is professional work product. While the EHR system provides a platform for documentation storage, the intellectual content of physician-authored notes does not constitute proprietary information of the health system or EHR vendor in a manner that would restrict the physician's own professional use of that content. No court in the United States has upheld a restriction preventing a treating physician from accessing and using the clinical notes they authored for legitimate professional purposes.

Regarding PDI Med's data handling: PDI Med processes pasted note text through a multi-layer de-identification pipeline before any clinical assertion leaves the physician's local environment. The operational layers are: (1) structured regex pattern matching across all 18 HIPAA Safe Harbor identifier categories; (2) named-entity recognition (NER) for residual person and location detection; (3) mandatory physician preview — the physician must explicitly review and verify all redactions before any submission proceeds; and (4) an outbound tripwire that blocks transmission if PHI signatures remain in the payload. All de-identification decisions are retained as evidence spans in a forensically auditable local audit log. This pipeline applies HIPAA Safe Harbor methodology (45 CFR §164.514(b)) systematically and verifiably to every submission. Clinical note content stored in the physician's vault is encrypted with AES-256-GCM under a physician-controlled key; the plaintext is not accessible to PDI Med systems. PDI Med operates as a Business Associate under HIPAA and executes BAAs with institutional partners upon request.

This physician's use of PDI Med is fully consistent with federal law, HIPAA regulations, and ABOG certification requirements. Any institutional policy that would prevent this physician from accessing and using their own clinical documentation for board certification purposes should be reviewed for compliance with the 21st Century Cures Act's Information Blocking provisions before enforcement.

PDI Med's legal counsel is available to respond to institutional inquiries at dan@pdi-med.com. We welcome direct engagement with compliance offices and welcome the opportunity to provide our full technical security documentation upon request.

Respectfully submitted,

Physician Signature · Date
Printed Name, Degree, Department