Fig. 3.

Illustration of automated pixel data anonymisation procedure applied before uploading images. The image shown is a cropped ultrasound scan of a training phantom. The image metadata are examined to determine if pixel data anonymisation is required. If so, a suitable template for the scanner model and image resolution is located that specifies which regions of the image contain personal identifiable data. These regions are blacked out before uploading. If no suitable template is found, the data are not uploaded.