Death-certificate de-identification removes the deceased person's, the informant's, and the certifier's identifiers from a medical certificate of cause of death. The legal position is unusual: DPA 2018 s.3(2) limits personal data to information about a living individual, so UK GDPR does not protect the deceased — but the informant and the certifying doctor are alive, and the common-law duty of confidence survives death. anonym.plus runs locally and keeps the cause-of-death chain for mortality analysis.
When this applies
Mortality datasets underpin public-health research. The certificate is issued under Births and Deaths Registration Act 1953 s.22 and, since September 2024, is scrutinised by the statutory medical examiner system introduced by the Health and Care Act 2022. Every version of it names the informant and the doctor who signed it.
How anonym.plus handles it
- Load the certificate into anonym.plus on your device.
- It finds decedent, informant, and certifier identifiers.
- Exact dates and places get flagged; the cause text stays.
- Swap or black out the confirmed identifiers.
- Save the clean file on your device.
What you need to provide
- The certificate (PDF, scan, or registry export).
- A date and place broaden option for mortality analysis.
- An operator to suit the later use.
Patient data entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | deceased name → [NAME] |
| Relatives | PERSON | informant (spouse) → [INFORMANT] |
| Names | PERSON | certifying doctor → [CERTIFIER] |
| Dates | DATE_TIME | date registered → [DATE] |
| Location | LOCATION | place registered → [PLACE] |
| National Insurance | UK_NINO | QQ 12 34 56 C → [ID] |
Compliance achieved
- DPA 2018 s.3(2) limits personal data to a living individual, so UK GDPR does not cover the deceased — but the informant and the certifier are living data subjects.
- The common-law duty of confidence survives death, as the Information Tribunal held in Bluck v Information Commissioner (2007); FOIA 2000 s.41 reflects the same point.
- Access after death runs through Access to Health Records Act 1990 s.3(1)(f) — the personal representative and anyone with a claim arising from the death.
- The certificate is issued under Births and Deaths Registration Act 1953 s.22, now scrutinised by the statutory medical examiner system introduced by the Health and Care Act 2022 and commenced in September 2024.
- Where the case was referred to a coroner, the Notification of Deaths Regulations 2019 and Coroners and Justice Act 2009 s.1 govern the coroner's investigation.
- Keeps the cause-of-death chain intact for public-health analysis.
Anonymise death certificates offline — see plans & start free →
Limitations & cautions
The deceased are outside UK GDPR by DPA 2018 s.3(2), but confidentiality and Access to Health Records Act 1990 duties continue, and the informant and certifier remain living data subjects. Place and exact date are powerful clues in mortality data, so broaden them. A rare cause in a small area can re-identify after every direct identifier is gone.
Frequently asked questions
Is a deceased person's data still protected?
Not by UK GDPR: DPA 2018 s.3(2) defines personal data as information about an identified or identifiable living individual. But the common-law duty of confidence survives death, which the Information Tribunal confirmed in Bluck v Information Commissioner in 2007, and FOIA 2000 s.41 reflects it. De-identification before reuse remains good practice.
Who can see the health records of someone who has died?
Access is governed by the Access to Health Records Act 1990 rather than by UK GDPR. Section 3(1)(f) gives a right of application to the deceased person's personal representative and to anyone who may have a claim arising out of the death, and the Act contains its own exemptions.
Are informant and certifier details removed too?
Yes, and they are the most clearly protected people in the document, because they are alive. The informant is usually a close relative, and the certifying doctor is an identifiable professional. Both are flagged alongside the deceased person's details.