De-identifying an EAP file is the removal of data that names an employee who sought help. Such health data is special-category under GDPR Art. 9. anonym.plus runs on your own device, so the case detail stays while the worker is hidden.
When this applies
An EU employer wants aggregate EAP usage stats. The files name workers, their managers, and the company unit, which must come out first.
How anonym.plus handles it
- Open the file in anonym.plus on your device.
- Local OCR reads any scanned page.
- It flags worker and manager names plus the unit.
- Review each flag and keep the case content.
- Replace each value with a label, or remove it.
- Save the clean file. The source stays local.
What you need to provide
- The record (PDF, DOCX, TXT, or scan).
- An operator: Replace, Redact, or Mask.
- Optional: a key map for re-linking.
PHI entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Employee | PERSON | Klara Behr → [EMPLOYEE_1] |
| Manager | PERSON | lead Stefan → [STAFF_1] |
| Company unit | ORGANIZATION | Nordwerk GmbH → [EMPLOYER] |
| Date | DATE_TIME | Seen 05/18/2026 → [DATE] |
| EMAIL_ADDRESS | k.behr@firm.de → [EMAIL] | |
| National ID | NATIONAL_ID | DE 778 204 → [ID] |
Compliance achieved
- Removes special-category identifiers for GDPR Art. 9.
- Once anonymized, the file falls outside GDPR under Recital 26.
- Runs offline, so no cross-border transfer occurs.
- Working files are sealed with AES-256-GCM.
Anonymize EAP records offline — see plans & start free →
Limitations & cautions
Workplace data can re-identify a person through a small team. The tool removes named identifiers. You still confirm that unit size and role do not single out one worker in the stats.
Frequently asked questions
Can the employer see EAP usage?
Only in aggregate, de-identified form. Removing names and units lets you report trends without exposing who used the service.
Are managers removed?
Yes. A named manager or team lead is an identifier. The tool flags each so the worker cannot be traced through their reporting line.
Does data cross a border?
No. The app runs locally, so no transfer to a third country takes place.