Discharge summary de-identification removes direct and indirect identifiers so the file is anonymous under UK GDPR Recital 26 and the ICO Anonymisation Code of Practice. anonym.plus does this on your own device. The text stays readable, but it no longer names the patient.
When this applies
You want to share the file, teach from it, or feed it to an analytics tool. Each use needs the data stripped of names, dates, and record numbers first.
How anonym.plus handles it
- Open the file (PDF, DOCX, or scan) in anonym.plus on your device.
- Local OCR reads scanned pages, so it catches printed text too.
- The tool flags names, dates, NHS numbers, addresses, and phone numbers.
- Check the flagged items and fix any clinical term caught by mistake.
- Swap each identifier for a safe label, or black it out.
- Save the clean file. The original never leaves your machine.
What you need to provide
- The file (PDF, DOCX, TXT, or image scan).
- An operator: Replace (swap), Redact (remove), or Mask (partial).
- Optional: a name map if you need to re-link records later.
Patient data entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | Oliver Bennett → [PATIENT_1] |
| Dates | DATE_TIME | Admitted 11/03/2026 → [DATE] |
| Record IDs | MEDICAL_RECORD_NUMBER | MRN 884213 → [MRN] |
| NHS Number | UK_NHS | NHS 943 476 5919 → [NHS_NO] |
| Location | LOCATION | 14 Elm Road, Leeds → [ADDRESS] |
| Contact | PHONE_NUMBER | +44 7700 900123 → [PHONE] |
Compliance achieved
- Removes direct and indirect identifiers under UK GDPR Art. 9 & DPA 2018.
- True anonymity puts the result outside UK GDPR scope under Recital 26.
- Runs offline — no cloud upload, no data-processor contract triggered for a cloud vendor.
- Working files are kept safe with AES-256-GCM at rest.
Anonymise discharge summaries offline — see plans & start free →
Limitations & cautions
UK GDPR Recital 26 requires that no one can reasonably re-identify the person. The tool removes direct and indirect identifiers. You still judge rare free-text clues (a rare illness plus a small town). For those, apply the ICO motivated-intruder test.
Frequently asked questions
Which identifiers must go for UK GDPR anonymisation?
The ICO Anonymisation Code of Practice says the file is anonymous only when no one can reasonably re-identify it. That means removing names, NHS numbers, dates, addresses, phone numbers, and any other direct or indirect identifiers that could single out the person.
Does this need a data-processor contract with a cloud vendor?
No. anonym.plus runs on your own device with no cloud step. No outside party touches the record, so no data-processor agreement is triggered.
Will the file still read well after the swap?
Yes. The Replace operator puts a steady label in place of each identifier, so the text still flows and no longer points to a real person.