Member Enrolment File De-Identification with anonym.plus

Clear IDs from the enrolment feed while the plan choices stay.

In simple terms, PII redaction is the on-device process of finding and masking personally identifiable information in a document before it is shared.

Member enrolment de-identification is the removal of personal IDs from an enrolment record. The answers a member gives at this stage are exactly what the Consumer Insurance (Disclosure and Representations) Act 2012 later measures if a claim is disputed, and where the record touches family medical history, the voluntary Code on Genetic Testing and Insurance restricts insurers from using predictive genetic test results except for a small number of high-value policies. anonym.plus works locally and keeps the plan choices for analysis.

When this applies

The record is ID-dense: full demographics, dependants, and a plan choice, built on the disclosure duty CIDRA 2012 sets at inception. To study take-up rates or train staff, strip those IDs first and keep the plan choice and tier.

How anonym.plus handles it

  1. Open the feed in anonym.plus on your device.
  2. It finds demographic, dependant, and contact fields.
  3. Dependant names get flagged as related-party IDs.
  4. Keep the plan choice and the tier you need.
  5. Swap or black out the confirmed items.
  6. Save the clean copy on your machine.

What you need to provide

Patient data entity types detected

Categoryanonym.plus entity typeExample
NamesPERSONEnrollee D. Roth → [MEMBER]
DependantPERSONDependant child → [DEPENDANT]
Member IDUK_HEALTH_INSURANCE_MEMBERMbr VIT-228841 → [MEMBER_ID]
NI numberUK_NINOQQ 98 76 54 A → [ID]
DatesDATE_TIMEDOB 1985 → [DOB]
AddressLOCATIONhome address → [ADDRESS]

Compliance achieved

Anonymise enrolment records offline — see plans & start free →

Limitations & cautions

Dependants’ IDs must go too, since they are personal data when tied to the enrollee. Check that custom demographic fields are mapped, so nothing slips past in a fixed layout.

Frequently asked questions

Are dependants anonymised too?

Yes. A dependant's name or birth date in the enrollee's record is personal data in its own right, not just an attribute of the enrollee, so it is flagged for removal along with the member's own details.

Does the plan choice stay?

Yes. The chosen plan and the tier stay, so the data is still useful for take-up studies. Only the identifying fields underneath them change.

Does genetic or family history data get special treatment?

Where it appears, yes — it is UK GDPR Art. 9 health data on top of being covered by the voluntary Code on Genetic Testing and Insurance, which already limits how insurers may use predictive genetic test results in underwriting. The tool flags it as sensitive alongside the member's other health fields.