From a legal perspective, journal article authors can implement this by following the official HHS guidance for de-identification. This applies to any use of protected health information (PHI), not just case reports.

https://www.hhs.gov/hipaa/for-professionals/special-topics/d...

The IRB for a particular organization can impose additional restrictions.