SOAP-note de-identification strips identifiers from all four sections of a note: Subjective, Objective, Assessment, and Plan. The Subjective section is where the real risk sits, because UK GDPR Art. 4(1) counts factors specific to a person's economic, cultural, or social identity as identifiers in their own right — an occupation, an employer, a hobby. anonym.plus runs locally and gives that section extra attention.
When this applies
SOAP notes are the backbone of clinic documentation and a favourite teaching format. The Subjective section quotes the patient, often naming family, workplace, and daily life, so removing the obvious identifiers is only half the job.
How anonym.plus handles it
- Open the note in anonym.plus on your device.
- Each section is scanned; patient quotes get extra care.
- Names, dates, places, and contacts get flagged in all four sections.
- Swap them so the four sections still read clearly.
- Save the clean note on your device.
What you need to provide
- The note (TXT, DOCX, PDF, or pasted text).
- An operator (Replace keeps the section layout clear).
- Optional allow-list for standard examination terms.
Patient data entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | S: 'I am Omar' → [PATIENT] |
| Relatives | PERSON | wife Dina → [RELATIVE] |
| Dates | DATE_TIME | 06/04 → [DATE] |
| Location | LOCATION | works at the brewery → [EMPLOYER] |
| Record IDs | MEDICAL_RECORD_NUMBER | chart 7741 → [MRN] |
| Contact | EMAIL_ADDRESS | o.k@example.com → [EMAIL] |
Compliance achieved
- UK GDPR Art. 4(1) names the risk in the Subjective section: factors specific to a person's economic, cultural, or social identity are identifiers too.
- UK GDPR Recital 26 asks about all the means reasonably likely to be used to re-identify; the ICO motivated-intruder test is how you answer that.
- Quoted third parties are covered by UK GDPR Art. 15(4), so their details come out as well.
- Removes the health data UK GDPR Art. 9(1) treats as special category, across all four sections.
- The source note still has to satisfy the GMC Good Medical Practice record-keeping duty; only the reuse copy changes.
- Local-only work — nothing is uploaded.
Anonymise SOAP notes offline — see plans & start free →
Limitations & cautions
The Subjective section holds the most residual risk. Patients name jobs, hobbies, and family in ways that can identify them with no name present at all — precisely the 'social identity' factors UK GDPR Art. 4(1) describes. Read that section closely. Automated entity detection cannot judge when a life detail is unique.
Frequently asked questions
Why does the Subjective section need extra care?
It records the person's own words, and those words routinely include an employer, a neighbourhood, a role in a small community, or a family situation. UK GDPR Art. 4(1) treats factors specific to someone's economic, cultural, or social identity as identifiers, so these details are personal data even with every name removed.
What about people the patient talks about?
They are data subjects too. UK GDPR Art. 15(4) makes the point directly in the access context: one person's rights must not adversely affect another's. A named partner, employer, or neighbour in the Subjective section is flagged and swapped alongside the patient's own details.
Does patient data removal keep the SOAP layout?
Yes. The four sections stay clearly separated and readable, and only the identifiers inside them change. That matters for teaching, where the point is often to show how the Subjective, Objective, Assessment, and Plan sections connect.