This de-identification is the removal of personal data from a compliance extract. NHS bodies run their internal review function against the Public Sector Internal Audit Standards, which HM Treasury mandates across the public sector, and the samples that work draws on carry personal data under UK GDPR Art. 9 & DPA 2018. anonym.plus runs on your own device. The findings stay testable, but the rows no longer name patients or staff.
When this applies
A compliance team samples charts and access entries to test a control, as the Public Sector Internal Audit Standards expect. The sample names patients and the workers who touched each chart, and that must come out before the finding is shared.
How anonym.plus handles it
- Point anonym.plus at the sample on your server.
- It scans ID columns and any free-text fields.
- Steady labels keep links across joined rows.
- Review the summary and adjust the column rules.
- Swap each identifier, shifting dates to keep the gaps.
- Save the clean sample. Source rows stay local.
What you need to provide
- The sample (CSV, JSON, or a file bundle).
- A column map for known ID fields.
- Replace with a steady map to keep joins.
Patient data entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Patient | PERSON | subject → [PATIENT_n] |
| Staff | PERSON | reviewer → [AUDITOR_n] |
| Staff ID | ID | login bweiss → [USERNAME] |
| Dates | DATE_TIME | sampled → shifted [DATE] |
| Record IDs | MEDICAL_RECORD_NUMBER | nhs_number field → [NHS_NUMBER_n] |
| Network | IP_ADDRESS | 10.2.7.40 → [IP] |
Compliance achieved
- Supports testing under the Public Sector Internal Audit Standards that HM Treasury mandates for NHS bodies.
- Strips personal data under UK GDPR Art. 9 & DPA 2018.
- Runs offline, so no supplier contract is needed.
- Keeps row links steady, so the control stays testable.
Anonymise audit datasets offline — see plans & start free →
Limitations & cautions
A compliance sample mixes tidy columns with note fields. The columns are easy to map; notes need the same care as any chart. Test a small slice first, and confirm that date-shifting keeps the gaps your test relies on.
Frequently asked questions
Why does internal review at an NHS body follow a specific standard?
NHS bodies are public sector organisations, and HM Treasury mandates the Public Sector Internal Audit Standards for exactly that reason. Following them doesn't require keeping a sample identifiable any longer than the test itself needs — de-identifying it before the finding is written up or shared is a separate, additional step.
Does the compliance sample hold personal data?
Yes. It names patients in the charts and the staff who handled them. Both are cleared so the findings can be shared without exposing people.
Are staff logins and IPs handled?
Yes. Usernames, IPs, and timestamps in access entries are flagged alongside patient identifiers, and a steady map keeps the same joins testable after the swap.