Patient data is fully anonymized. Access is logged for audit compliance.