De-identifying an EAP file is the removal of data that names an employee who sought help. Such health data is special-category under UK GDPR Art. 9. anonym.plus runs on your own device, so the case detail stays while the worker is hidden.
When this applies
An employer wants aggregate EAP usage statistics. The files name workers, their managers, and the company unit, which must come out first.
How anonym.plus handles it
- Open the file in anonym.plus on your device.
- Local OCR reads any scanned page.
- It flags worker and manager names plus the unit.
- Review each flag and keep the case content.
- Replace each value with a label, or remove it.
- Save the clean file. The source stays local.
What you need to provide
- The record (PDF, DOCX, TXT, or scan).
- An operator: Replace, Redact, or Mask.
- Optional: a key map for re-linking.
Patient data entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Employee | PERSON | Klara Behr → [EMPLOYEE_1] |
| Manager | PERSON | lead Stefan → [STAFF_1] |
| Company unit | ORGANIZATION | Nordwerk UK Ltd → [EMPLOYER] |
| Date | DATE_TIME | Seen 18/05/2026 → [DATE] |
| EMAIL_ADDRESS | k.behr@firm.co.uk → [EMAIL] | |
| NHS number | NHS_NUMBER | NHS 778 204 1234 → [NHS_NO] |
Compliance achieved
- Removes special-category identifiers under UK GDPR Art. 9.
- Once anonymised, the file falls outside UK GDPR under Recital 26.
- Runs offline, so no cross-border transfer occurs.
- Working files are sealed with AES-256-GCM.
Anonymise EAP records offline — see plans & start free →
Limitations & cautions
Workplace data can re-identify a person through a small team. The tool removes named identifiers. You still confirm that unit size and role do not single out one worker in the statistics.
Frequently asked questions
Can the employer see EAP usage?
Only in aggregate, de-identified form. Removing names and units lets you report trends without exposing who used the service.
Are managers removed?
Yes. A named manager or team lead is an identifier. The tool flags each so the worker cannot be traced through their reporting line.
Does data cross a border?
No. The app runs locally, so no transfer to a third country takes place.