Anonymizing an assessment is the removal of data that names the subject. Mental health data is special-category data under GDPR Art. 9. anonym.plus runs on your own device, so the scores stay while the person is hidden.
When this applies
A clinic in the EU wants to pool test scores for a norm study. Each report names the subject, a parent, and a school, which must come out first.
How anonym.plus handles it
- Open the report in anonym.plus on your device.
- Local OCR reads scanned answer sheets too.
- It flags subject and parent names, dates, and the school.
- Review each flag and keep the score tables.
- Replace each value with a label, or redact it.
- Save the result. The first copy stays on your machine.
What you need to provide
- The report (PDF, DOCX, TXT, or scan).
- An operator: Replace, Redact, or Mask.
- Optional: a key map for re-linking.
PHI entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Subject | PERSON | Anja Kohl → [SUBJECT_1] |
| Parent | PERSON | mother Petra → [FAMILY_1] |
| School | ORGANIZATION | Lessing-Gymnasium → [SCHOOL] |
| Test date | DATE_TIME | Tested 05/12/2026 → [DATE] |
| Record ID | ID | Case 8842 → [CASE_ID] |
| National ID | NATIONAL_ID | DE 552 119 → [ID] |
Compliance achieved
- Removes special-category identifiers for GDPR Art. 9.
- Once anonymized, the file falls outside GDPR under Recital 26.
- Runs offline, so no cross-border transfer occurs.
- Working files are sealed with AES-256-GCM.
Anonymize psychological assessments offline — see plans & start free →
Limitations & cautions
GDPR sets a high bar for true anonymization. The tool removes named identifiers. You still confirm that a rare score pattern cannot single out one subject when combined with other data.
Frequently asked questions
When does data leave GDPR scope?
When it can no longer be linked to a person by any means likely to be used. Recital 26 sets that test. Removing identifiers is the key step toward it.
Are parents and schools removed?
Yes. A named parent or school is an identifier. The tool flags each so the subject cannot be traced through family or institution.
Does data cross a border?
No. The app runs locally, so no transfer to a third country takes place.