Claim Form De-Identification with anonym.plus

Pull every member ID off the form while the billing detail stays.

Claim form de-identification is the removal of member and provider IDs from a private medical insurance (PMI) claim form. It meets DPA 2018 & UK GDPR. anonym.plus does this on your own device.

When this applies

You want to share a form for an audit, a study, or staff training. Each use needs names, IDs, and dates stripped first.

How anonym.plus handles it

  1. Open the form (PDF, scan, or export) in anonym.plus on your device.
  2. Local OCR reads scanned pages, so printed boxes are caught too.
  3. The tool flags the member, the provider, dates, and ID numbers.
  4. Check each flag and keep the billing codes you still need.
  5. Swap each ID for a safe label, or black it out.
  6. Save the clean copy. The original never leaves your machine.

What you need to provide

Patient data entity types detected

Categoryanonym.plus entity typeExample
NamesPERSONSubscriber Diana Reid → [MEMBER]
MembershipUK_HEALTH_INSURANCE_MEMBERMbr BUP-4471882 → [MEMBER_ID]
AccountACCOUNT_NUMBERAcct 55-220914 → [ACCOUNT]
DatesDATE_TIMETreatment 04/12/2026 → [DATE]
ProviderPERSONDr Holt, GMC → [PROVIDER]
NI numberUK_NINOQQ 12 34 56 C → [ID]

Compliance achieved

Anonymise claim forms offline — see plans & start free →

Limitations & cautions

Billing layouts pack IDs into fixed boxes. Map your custom fields so none slip past. The tool finds named items, but a rare procedure on a known date at a small site can still narrow identity. Judge those edge cases yourself.

Frequently asked questions

Which IDs sit on a typical PMI claim form?

Member name, membership number, account number, group or policy code, the treatment date, the provider, and often a National Insurance number. Each one is flagged for removal.

Does this need a data processor contract?

No. anonym.plus runs on your own device with no cloud step. No outside party touches the data, so no processor contract is needed.

Can I keep the procedure codes?

Yes. Non-ID billing codes can stay via an allow-list while personal IDs go.