Eligibility Verification De-Identification with anonym.plus

Clear IDs from the eligibility check while the coverage status stays.

In simple terms, PII redaction is the on-device process of finding and masking personally identifiable information in a document before it is shared.

Eligibility verification de-identification is the removal of UK GDPR identifiers from a coverage check. The cover itself was granted on the answers the member gave at inception, which the Consumer Insurance (Disclosure and Representations) Act 2012 measures against a duty to take reasonable care not to misrepresent, rather than the older duty of utmost good faith. anonym.plus runs on your device; the status lines stay clear, but the page no longer names the member.

When this applies

An eligibility check names the subscriber and lists the coverage tier that follows from their original CIDRA 2012 disclosure. To reuse it for a denial study or a workflow audit, clear those IDs first and keep the coverage status and tier.

How anonym.plus handles it

  1. Open the record in anonym.plus on your device.
  2. Local OCR reads any scanned printout too.
  3. The tool flags subscriber names, dates, and membership numbers.
  4. Keep the coverage status and the benefit tier you need.
  5. Replace each ID with a steady alias, or redact it.
  6. Save the clean copy on your machine.

What you need to provide

Patient data entity types detected

Categoryanonym.plus entity typeExample
NamesPERSONSubscriber Pia Lund → [SUBSCRIBER]
Member IDUK_HEALTH_INSURANCE_MEMBERID AXA-4471A → [MEMBER_ID]
GroupIDGroup GRP-2231 → [GROUP]
DatesDATE_TIMEDOB 06/1979 → [DOB]
NI numberUK_NINOQQ 12 34 56 C → [ID]
AddressLOCATION14 Kipling Road → [ADDRESS]

Compliance achieved

Anonymise eligibility records offline — see plans & start free →

Limitations & cautions

Group and policy codes can re-link a person to a small employer. Treat them as identifiers. The tool removes direct ID types, but you still need to weigh whether a rare benefit tier plus a place could narrow identity.

Frequently asked questions

Is a group number personal data?

Yes. A group or policy code can tie a person to a small employer, so on its own or alongside other fields it is a personal data identifier. It is flagged for removal like the member number itself.

Does the coverage status stay?

Yes. The active or inactive status and the benefit tier stay, because they follow from the disclosure the member gave under the Consumer Insurance (Disclosure and Representations) Act 2012 at inception, not from their name or number. Only the identifying fields around that status change.

Can a printed eligibility check be cleaned?

Yes. Local OCR reads scanned printouts, so the IDs are caught the same way as in a digital export, and the coverage status is preserved either way.