Board Report Patient Data Removal with anonym.plus

Strip identifiable case details from a governance document before wider distribution.

In simple terms, PII redaction is the on-device process of finding and masking personally identifiable information in a document before it is shared.

Board-report patient data removal strips personal data from a governance document. Under Schedule 7, paragraph 10(1) of the NHS Act 2006, an NHS foundation trust's board must hold most of its meetings in public, so board papers often reach a wide audience, including anyone who requests them under FOIA 2000. Section 40(2) of that Act exempts personal data from disclosure, and anonym.plus does the clearing on your own device before the papers go out. The figures and case lessons stay, but no individual or named worker is identifiable.

When this applies

A quarterly pack for a foundation trust board, due to be discussed at a meeting held in public under Schedule 7 of the NHS Act 2006, cites named cases and outcome figures. Once it's published or requested under FOIA, those embedded personal and staff details must come out.

How anonym.plus handles it

  1. Open the document in anonym.plus on your device.
  2. Local OCR reads any scanned appendix pages.
  3. It flags case names, staff names, and exact dates.
  4. Confirm the flags and keep the aggregate figures.
  5. Swap each detail for a clear label, or remove it.
  6. Save the cleaned document. The source stays local.

What you need to provide

Patient data entity types detected

Categoryanonym.plus entity typeExample
PatientPERSONcase: T. Marin → [PATIENT]
StaffPERSONlead: Dr. Yusuf → [STAFF]
DatesDATE_TIMEevent 11/2025 → [DATE]
Record IDsMEDICAL_RECORD_NUMBERNHS No. 660 241 3318 → [NHS_NUMBER]
LocationLOCATIONSite North → [LOCATION]
IdentifiersIDcase ref BR-204 → [CASE_ID]

Compliance achieved

Anonymise board reports offline — see plans & start free →

Limitations & cautions

Aggregate figures are usually safe, but a small-cell count plus a named site can narrow identity. Check low counts and broaden them where needed. A single cited case may also carry a unique clue beyond the obvious identifiers.

Frequently asked questions

Why are board papers subject to public disclosure at all?

Schedule 7, paragraph 10(1) of the NHS Act 2006 requires an NHS foundation trust's board of directors to hold most of its meetings in public, and the papers for that meeting are typically published alongside it. FOIA 2000 s.40(2) then exempts any personal data those papers contain, which is why a named case or a named worker needs to come out first.

Are summary statistics personal data?

Aggregates are usually not personal. But a very small cell, like one case in a tiny unit, can point to a person. Broaden such counts when you remove the named detail.

Are named cases cleared?

Yes. Any case that names an individual or worker is swapped, while the figures and KPI labels around it stay untouched.