Immunisation Record Redaction with anonym.plus

Clear identifiers from the file while the shot schedule stays.

Immunisation-record redaction removes patient identifiers from a vaccine file. It meets DPA 2018 and the NHS Confidentiality Code for reuse. anonym.plus runs locally and keeps the vaccine, lot, dose, and dates that public-health work needs.

When this applies

Registries and coverage studies need true shot and schedule data, but the file carries the name, date of birth, and identifier. Redaction clears those and keeps the useful fields.

How anonym.plus handles it

  1. Load the file into anonym.plus on your device.
  2. It finds the name, date of birth, and identifiers.
  3. The vaccine, lot, dose, and date fields stay (dates can go broad).
  4. Black out or swap the confirmed personal data.
  5. Save the clean file on your device.

What you need to provide

Patient data entity types detected

Categoryanonym.plus entity typeExample
NamesPERSONpatient name → [PATIENT]
DatesDATE_TIMEDOB → [DOB]
NHS NumberUK_NHSNHS 943 476 5919 → [NHS_NO]
LocationLOCATIONclinic address → [CLINIC]
NamesPERSONgiving nurse → [STAFF]
ContactPHONE_NUMBERguardian phone → [PHONE]

Compliance achieved

Anonymise immunisation records offline — see plans & start free →

Limitations & cautions

For child files, guardian details are personal data too and must go. Shot dates may be needed exactly for schedule work. Broaden them only when your study allows, or you break the gap calculations.

Frequently asked questions

Are guardian details on a child’s file removed?

Yes. A parent or guardian identifier in a child’s file is personal data and is flagged for removal with the patient’s own.

Can I keep the lot numbers?

Yes. Vaccine type, lot, and dose stay. They are needed and are not patient identifiers.

Does it support registry exports?

Yes. Printed cards and structured registry exports both work locally.