Substance Misuse Record Anonymisation with anonym.plus

Hide identity in substance misuse files without sending one byte off-device.

In simple terms, PII redaction is the on-device process of finding and masking personally identifiable information in a document before it is shared.

Anonymising a substance misuse file means removing data that names the person. The common-law duty of confidence and UK GDPR Art. 9 protect this care with strict limits on re-disclosure. anonym.plus runs on your own device, and the text stays usable after the swap. Where a service wants to study patterns across records without going back to each person for consent, the route in practice is either full anonymisation or a specific support under s.251 of the NHS Act 2006, overseen by the Health Research Authority's Confidentiality Advisory Group (CAG) — anonym.plus is built for the first path.

When this applies

An NHS Trust's community drug and alcohol team wants to study treatment trends across its caseload. The raw files name people, dates, and referral sources — each detail must be hidden before any analysis, since no s.251 support has been sought for this project.

How anonym.plus handles it

  1. Open the file in anonym.plus on your own device.
  2. Local OCR reads scanned referral forms too.
  3. It flags names, dates, and referral sources.
  4. Review each flag and protect clinical terms.
  5. Replace each tag with a label, or remove it.
  6. Save the clean output. The source never leaves your machine.

What you need to provide

Patient data entity types detected

Categoryanonym.plus entity typeExample
PersonPERSONMarcus Hale → [CLIENT_1]
Admit dateDATE_TIMEAdmitted 19/02/2026 → [DATE]
ReferrerORGANIZATIONNorthside Magistrates’ Court → [REFERRER]
PhonePHONE_NUMBER+44 7911 200144 → [PHONE]
NHS numberNHS_NUMBERNHS 321 654 9870 → [NHS_NO]
Record IDMEDICAL_RECORD_NUMBERChart 33841 → [MRN]

Compliance achieved

Anonymise substance misuse records offline — see plans & start free →

Limitations & cautions

The common-law duty of confidence limits how substance misuse data may flow to third parties. The tool strips named identifiers. You still control who receives the output and confirm no rare detail can trace it back to one client.

Frequently asked questions

Does UK law cover all substance misuse care?

The common-law duty of confidence applies to all NHS and private clinical records, whether care is delivered by an NHS Trust community team or an independent clinic. UK GDPR Art. 9 adds a special-category layer for health data, so treat every substance misuse file as highly sensitive under both frameworks.

Yes, with care. Save the key map separately and away from the shared copy, so a reader with the de-identified export alone cannot reverse the swap or trace a row back to a named client.

Could the team apply for s.251 support instead of anonymising?

In principle, yes — a trust can seek Confidentiality Advisory Group approval under NHS Act 2006 s.251 to use identifiable data for an approved study without individual consent. That is a separate, formal application process; anonym.plus instead lets a team avoid needing it at all by removing identifiers first.