De-identifying an EAP file is the removal of data that names an employee who sought help. Such health data is special-category under UK GDPR Art. 9. anonym.plus runs on your own device, so the case detail stays while the worker is hidden. A mental health condition disclosed through an EAP can also amount to a disability under the Equality Act 2010, which is a separate reason employers must not see who used the service, beyond the UK GDPR Art. 9 protection for the underlying health data.
When this applies
An employer's HR team wants aggregate EAP usage statistics to support its Equality Act workplace wellbeing duties. The files name workers, their managers, and the company unit, which must come out first.
How anonym.plus handles it
- Open the file in anonym.plus on your device.
- Local OCR reads any scanned page.
- It flags worker and manager names plus the unit.
- Review each flag and keep the case content.
- Replace each value with a label, or remove it.
- Save the clean file. The source stays local.
What you need to provide
- The record (PDF, DOCX, TXT, or scan).
- An operator: Replace, Redact, or Mask.
- Optional: a key map for re-linking.
Patient data entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Employee | PERSON | Klara Behr → [EMPLOYEE_1] |
| Manager | PERSON | lead Stefan → [STAFF_1] |
| Company unit | ORGANIZATION | Nordwerk UK Ltd → [EMPLOYER] |
| Date | DATE_TIME | Seen 18/05/2026 → [DATE] |
| EMAIL_ADDRESS | k.behr@firm.co.uk → [EMAIL] | |
| NHS number | NHS_NUMBER | NHS 778 204 1234 → [NHS_NO] |
Compliance achieved
- Removes special-category identifiers under UK GDPR Art. 9.
- A disclosed mental health condition can be a disability under the Equality Act 2010 — a further reason an employer should only ever see aggregate, de-identified EAP statistics.
- Once anonymised, the file falls outside UK GDPR under Recital 26.
- Runs offline, so no cross-border transfer occurs.
- Working files are sealed with AES-256-GCM.
Anonymise EAP records offline — see plans & start free →
Limitations & cautions
Workplace data can re-identify a person through a small team. The tool removes named identifiers. You still confirm that unit size and role do not single out one worker in the statistics.
Frequently asked questions
Can the employer see EAP usage?
Only in aggregate, de-identified form. Removing names and units lets HR report trends and support wellbeing planning without exposing who used the service.
Are managers removed?
Yes. A named manager or team lead mentioned in the file is an identifier in its own right. The tool flags each one so the worker cannot be traced through their reporting line, even in a small team.
Does the Equality Act change what the employer can ask for?
It reinforces the same limit UK GDPR already sets. An employer that could work out which employee used the EAP from supposedly aggregate figures risks both a data-protection problem and, where the underlying condition is a disability, a discrimination risk under the Equality Act 2010 — so the statistics need to stay genuinely aggregate.