Medication note redaction is the removal of identifying data from a prescriber’s notes under UK GDPR Art. 9 and DPA 2018. anonym.plus does it on your device. The dosing detail stays; the patient is no longer named. Prescribing records for a clozapine clinic or similar high-monitoring service also sit within the recordkeeping expectations of the Human Medicines Regulations 2012, alongside UK GDPR Art. 9 protection for the underlying health data.
When this applies
A specialist mental health pharmacist wants to audit prescribing patterns in a clozapine clinic. The notes name patients, dates, and a pharmacy, which must be hidden before the audit.
How anonym.plus handles it
- Open the note in anonym.plus on your machine.
- Local OCR reads any scanned page.
- It flags names, dates, and the pharmacy.
- Review each flag and keep the dosing lines.
- Replace each identifier with a label, or hide it.
- Save the clean note. The source stays local.
What you need to provide
- The note (PDF, DOCX, TXT, or scan).
- An operator: Replace, Redact, or Mask.
- Optional: a name map for re-linking.
Patient data entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Patient | PERSON | Iris Walsh → [PATIENT_1] |
| Note date | DATE_TIME | Dated 03/05/2026 → [DATE] |
| Pharmacy | ORGANIZATION | Elm Pharmacy → [PHARMACY] |
| NHS number | NHS_NUMBER | NHS 509 170 1234 → [NHS_NO] |
| Phone | PHONE_NUMBER | +44 7700 900137 → [PHONE] |
| Record ID | MEDICAL_RECORD_NUMBER | MRN 50917 → [MRN] |
Compliance achieved
- Removes identifiers under UK GDPR Art. 9 & DPA 2018.
- Dosing and monitoring detail sits within the recordkeeping expectations of the Human Medicines Regulations 2012 — the tool removes who the record is about, not the clinical content those regulations expect to be kept.
- Runs offline, so no cloud processor contract is required.
- Notes are kept safe with AES-256-GCM.
- Assessed per ICO Anonymisation Code and UK GDPR Recital 26.
Anonymise medication management notes offline — see plans & start free →
Limitations & cautions
UK GDPR expects no residual clue that could re-identify the person. The tool clears named identifiers. A rare drug combination may still narrow the field, so review before sharing.
Frequently asked questions
Can I keep the drug names?
Yes. Drug names, doses, and monitoring results are clinical content, not identifiers, so the tool leaves them in place. That keeps the audit's actual data intact while the person it belongs to is hidden.
Is the pharmacy removed?
Yes. A named pharmacy is an identifier in its own right. The tool flags it so the patient cannot be traced through where they collect their prescription, even once their own name is hidden.
Does removing patient names affect medicines-regulation recordkeeping?
No. The Human Medicines Regulations 2012 expectations sit with the original clinical record, which is untouched. The de-identified copy exists only for the separate prescribing audit, and does not replace or amend the prescribing record itself.