[dredmorbius]

What is your budget?

Overall, per user, per patient.

What regulatory jurisdiction are you under? US, EU, UK, etc., all have sharply differing concerns.

You'll need a legal advisor to determine what information can and cannot be exchanged. Note that "no patient IDs" doesn't mean that cases aren't identifiable. Diagnosis and timing information are themselves sufficient in many instances, any additional information (the classic ASL --- age, sex, and location --- would also strongly reduce search space). You're working against 33 bits:

https://33bits.wordpress.com/about/

[capnahab]

What regulatory jurisdiction are you under? - as in the original post,- the UK thats why I posted the advice. This would not be an open forum. budget is minimal.

[dredmorbius]

Based on information provided, I'd suggest you reconsider participation in this project.