Vital Signs Chart De-Identification with anonym.plus

Clear identifiers from the chart while every reading stays.

In simple terms, PII redaction is the on-device process of finding and masking personally identifiable information in a document before it is shared.

Observation-chart de-identification removes patient identifiers from a vital signs record while every measurement survives. Those measurements are what the National Early Warning Score (NEWS2), published by the Royal College of Physicians in 2017, aggregates into a deterioration score, and what NICE clinical guideline CG50 expects staff to act on. anonym.plus works locally and keeps the temperature, pulse, blood pressure, and oxygen series whole.

When this applies

Observation charts feed early-warning-score audit and teaching. The numbers are the value; the name, the NHS number, and the timestamps are the risk. Escalating from a rising score is part of safe care and treatment under regulation 12 of the HSCA 2008 (Regulated Activities) Regulations 2014, so the audit trail matters.

How anonym.plus handles it

  1. Load the chart into anonym.plus on your device.
  2. It finds header identifiers: name, NHS number, and dates.
  3. The reading grid and trend lines stay in place.
  4. Swap identifiers and shift the times to keep the intervals.
  5. Save the clean copy on your device.

What you need to provide

Patient data entity types detected

Categoryanonym.plus entity typeExample
NamesPERSONheader name → [PATIENT]
Record IDsMEDICAL_RECORD_NUMBERMRN → [MRN]
DatesDATE_TIMEobservation times → shifted [TIME]
LocationLOCATIONWard/Bed → [LOCATION]
NamesPERSONrecorded-by → [STAFF]
NHS NumberUK_NHSNHS 943 476 5919 → [NHS_NO]

Compliance achieved

Anonymise vital signs charts offline — see plans & start free →

Limitations & cautions

Scanned paper charts depend on OCR, and faint handwriting causes errors, so check the header the tool found before you export. The readings themselves stay untouched and are not treated as identifiers — though an extreme, unusual observation set on a small ward can still narrow identity when combined with a date.

Frequently asked questions

Are the readings ever removed?

No. Every temperature, pulse, blood pressure, respiratory rate, and oxygen saturation stays exactly as recorded, so the NEWS2 score can be recomputed from the clean chart. Only the header identifiers and the clock times change.

How are observation times handled?

Times shift by one steady offset per chart, so the gaps between observations are preserved while the real times are hidden. That keeps the sheet usable for escalation-interval audit, which is the question NICE CG50 and NEWS2 work is usually asking.

Can scanned paper charts be cleaned?

Yes. Local OCR reads them, so identifiers printed or handwritten on paper are caught along with the digital text. Review the low-confidence flags on faint charts, since handwriting is where OCR errors concentrate.