The De-identification Checklist

I am going to use an AI assistant to help with clinical writing.
Before I paste anything, help me build a de-identification checklist
for my setting.

My setting: [SPECIALTY, COUNTRY/JURISDICTION, PRACTICE TYPE]
Applicable privacy framework: [HIPAA / UK GDPR & Caldicott /
Australian Privacy Principles / OTHER]

Produce a practical pre-paste checklist covering:
1. Direct identifiers that must always be removed
2. Indirect identifiers that are easy to overlook (occupation,
   rare diagnosis, unusual event, geography, family structure,
   employer, dates)
3. The "small population" problem — when a combination of
   non-identifying facts becomes identifying in a small community
4. What to do with dates: which to remove, which to convert to
   intervals
5. How to generalise age, ethnicity, and location without losing
   clinical meaning
6. A final 30-second sanity question I can ask myself before every
   paste

Format as a checklist I can print and keep next to my desk.