It must be properly de-identified, which requires sufficient QA to ensure data security. Source: https://www.dcmsys.com/patient-data-security/dicom-data-de-identification-and-re-identification/, Information shared above is the personal opinion of the author and not affiliated with the website.