Complaint redaction is the removal of identifying personal data from a grievance. Health data in a complaint is special-category under UK GDPR Art. 9, and DPA 2018 Schedule 1, Part 1, paragraph 2 supplies the domestic condition for processing it for health or social care purposes. Regulation 16 of the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014 separately requires every CQC-registered provider to run a system for receiving and acting on complaints. anonym.plus clears the identifiers on your own device. The story of what went wrong stays, but it no longer names anyone.
When this applies
A grievance arrives by letter, web form, or through the NHS complaints procedure, naming the patient, the staff, and a date. A panel convened under the provider's regulation 16 complaints system needs the substance, not the people, so the identifiers come out first.
How anonym.plus handles it
- Open the grievance in anonym.plus on your device.
- Local OCR turns scanned letters into searchable text.
- It flags the writer, the named staff, dates, and contacts.
- Confirm the flags and fix any term caught by mistake.
- Swap each identifier for a steady label, or remove it.
- Save the cleaned copy. The source stays on your machine.
What you need to provide
- The grievance (PDF, DOCX, web-form export, or scan).
- An operator (Replace keeps the narrative readable).
- Optional map so one complainant maps to one label.
Patient data entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Patient | PERSON | Amara Osei → [COMPLAINANT] |
| Staff | PERSON | Dr. Hofer → [STAFF] |
| Dates | DATE_TIME | visit 03/02/2026 → [DATE] |
| Contact | EMAIL_ADDRESS | a.osei@example.com → [EMAIL] |
| Contact | PHONE_NUMBER | +44 20 7946 0812 → [PHONE] |
| Record IDs | MEDICAL_RECORD_NUMBER | NHS No. 485 777 3251 → [NHS_NUMBER] |
Compliance achieved
- Meets the health-or-social-care condition in DPA 2018 Schedule 1, Part 1, paragraph 2 for processing special-category complaint data.
- Supports the complaints system every provider must run under reg. 16, Health and Social Care Act 2008 (Regulated Activities) Regulations 2014.
- Runs offline, so no supplier touches the data.
- Named staff are cleared too, since their data is personal.
Anonymise patient complaints offline — see plans & start free →
Limitations & cautions
A grievance is free text and often emotional. A writer may give a unique clue, like a job or an exact ward time, that points to one person after names go. Review such lines carefully, and apply the motivated-intruder test where a clue seems rare.
Frequently asked questions
What lets a hospital process special-category data in a complaint?
Health information in a grievance is special-category under UK GDPR Art. 9. DPA 2018 Schedule 1, Part 1, paragraph 2 is the domestic condition that permits processing it for health or social care purposes, which covers the ordinary handling of a patient complaint.
Does every provider have to run a complaints system?
Yes. Regulation 16 of the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014 requires a CQC-registered provider to have an accessible system for receiving, handling, and responding to complaints. Redacting the file before a wider panel sees it doesn't change that duty; it just limits who learns the complainant's identity.
Can I keep complaints from one person linked?
Yes. A label map gives one complainant the same steady alias across every file that mentions them, so a pattern of repeat concerns is still visible to a reviewer even though the name never appears.