What buyers want
- CT, MRI, X-ray, ultrasound and mammography studies
- Radiology reports linked to each study
- Pathology and lab results that confirm the diagnosis
- Follow-up outcomes over months or years
- Scanner make, model and protocol details
- Rare conditions and varied patient populations
See what qualifies for imaging and diagnostics centres.
How de-identification works
Identifiers sit in three places: DICOM header tags, text burned into the pixels, and free-text reports. The DICOM standard’s confidentiality profiles list which attributes to remove or replace. Under HIPAA, data is de-identified either by removing 18 types of identifier (Safe Harbor) or by a qualified expert’s determination (HHS guidance). Reports need automated scrubbing plus human review.
The rules by region
| Region | Rule | Key point |
|---|---|---|
| United States | HIPAA Privacy Rule | Properly de-identified data is no longer protected health information. |
| EU and UK | GDPR and UK GDPR | Health data is special-category data; anonymisation must be robust, or you need a legal basis. |
| Japan | APPI | Medical data needs special care; anonymously processed information has its own rules. |
| Elsewhere | Local health-data laws | Check national rules and ethics requirements before any transfer. |
How to license imaging data, step by step
- Confirm that your organisation, not a hospital partner or radiology group, can authorise use of the images.
- List modalities, years, volumes and linked reports.
- Check patient consent forms and contracts.
- De-identify in your own environment before anything leaves it.
- Agree uses, no re-identification, retention and audit rights in the licence agreement.
- Deliver through a secure, logged transfer.
What affects the price
No buyer publishes a price per study. Value rises with linked reports and confirmed outcomes, rare findings, a mix of scanners and a longer history. See how much company data is worth.
Frequently asked questions
Do we need patient consent to license de-identified images?
Under HIPAA, properly de-identified data does not need patient authorisation. In Europe, rules vary by country and some require consent or ethics approval. Take local legal advice.
Who owns the images: the centre or the radiologists?
It depends on your contracts. The organisation that holds the records and has the right to authorise their use must sign the licence.
Can we license reports without the images?
Yes. De-identified radiology reports alone can be valuable for language models.