Claim Form De-Identification with anonym.plus

Pull every member ID off the form while the billing detail stays.

In simple terms, PII redaction is the on-device process of finding and masking personally identifiable information in a document before it is shared.

Claim form de-identification is the removal of member and provider IDs from a private medical insurance (PMI) claim form. The document carries health data special category under UK GDPR Art. 9(1), and DPA 2018 Schedule 1, Part 1, paragraph 2 supplies the health-or-social-care condition insurers rely on to process it under Art. 9(2)(h). The FCA's ICOBS 8 claims-handling rules separately require the insurer to assess the claim promptly and fairly. anonym.plus clears the identifiers on your own device before the form is reused.

When this applies

You want to share a claim form for an audit, a study, or staff training. Each of those secondary uses sits outside the original claims-handling purpose the member consented to, so names, IDs, and dates come out first. The National Insurance number on the page is a separate identifier from the PMI membership number, and both need clearing.

How anonym.plus handles it

  1. Open the form (PDF, scan, or export) in anonym.plus on your device.
  2. Local OCR reads scanned pages, so printed boxes are caught too.
  3. The tool flags the member, the provider, dates, and ID numbers.
  4. Check each flag and keep the billing codes you still need.
  5. Swap each ID for a safe label, or black it out.
  6. Save the clean copy. The original never leaves your machine.

What you need to provide

Patient data entity types detected

Categoryanonym.plus entity typeExample
NamesPERSONSubscriber Diana Reid → [MEMBER]
MembershipUK_HEALTH_INSURANCE_MEMBERMbr BUP-4471882 → [MEMBER_ID]
AccountACCOUNT_NUMBERAcct 55-220914 → [ACCOUNT]
DatesDATE_TIMETreatment 04/12/2026 → [DATE]
ProviderPERSONDr Holt, GMC → [PROVIDER]
NI numberUK_NINOQQ 12 34 56 C → [ID]

Compliance achieved

Anonymise claim forms offline — see plans & start free →

Limitations & cautions

Billing layouts pack IDs into fixed boxes. Map your custom fields so none slip past. The tool finds named items, but a rare procedure on a known date at a small site can still narrow identity. Judge those edge cases yourself.

Frequently asked questions

Which IDs sit on a typical PMI claim form?

Member name, membership number, account number, group or policy code, the treatment date, the provider, and often a National Insurance number all appear on a typical form. Each one is personal data in its own right, and the National Insurance number is a distinct government identifier rather than part of the insurer's own numbering. The tool flags every one of these for removal.

Does this need a data processor contract?

No. anonym.plus runs entirely on your own device, so no outside party receives the form and no UK GDPR Art. 28 processor contract is triggered. That is different from sending the file to a cloud redaction service, which would make the vendor a processor and require exactly that agreement.

Can I keep the procedure codes?

Yes. Non-identifying billing codes can stay via an allow-list while the personal IDs around them are removed. That keeps the document useful for the audit or training use it is being prepared for.