Survey de-identification is the removal of personal data from patient feedback, above all the open-text responses. It meets the DPA 2018 & NHS Code of Confidentiality. anonym.plus runs on your device and keeps the scores and themes intact.
When this applies
Open responses often name a nurse, a doctor, or the writer’s own case. To share feedback with wards, those names come out while the praise or concern stays.
How anonym.plus handles it
- Load the submissions into anonym.plus on your device.
- Local OCR reads scanned paper forms first.
- It scans each entry for names, dates, and contacts.
- Confirm the flags and keep the rating fields.
- Swap each named item, or black it out.
- Save the clean output. Source forms stay local.
What you need to provide
- The submissions (CSV, PDF, DOCX, or scan).
- An operator (Replace keeps open text readable).
- Optional allow-list for ward and unit labels.
Patient data entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Patient | PERSON | 'I, Priya Patel, felt…' → [RESPONDENT] |
| Staff | PERSON | 'nurse Tom was kind' → [STAFF] |
| Dates | DATE_TIME | 'on 3rd May' → [DATE] |
| Contact | PHONE_NUMBER | +44 7700 900151 → [PHONE] |
| Contact | EMAIL_ADDRESS | p.patel@example.com → [EMAIL] |
| Location | LOCATION | Ward 9 → [LOCATION] |
Compliance achieved
- Meets the DPA 2018 & NHS Code of Confidentiality for reuse.
- Catches names in free text, where they hide most often.
- Offline work keeps feedback inside your service.
Anonymise satisfaction surveys offline — see plans & start free →
Limitations & cautions
Open-text responses are the riskiest part. A writer may give a job, a date, or a ward that points to one person after the name goes. Review flagged entries, since an automated pass cannot judge every unique life clue.
Frequently asked questions
Are open responses personal data?
They can be. A response that names the writer or a clinician, or gives a unique clue, is personal data and must be cleared before wider sharing.
Do the scores survive?
Yes. Rating and score fields stay. Only the identifying detail in the text changes.
Can named staff be cleared too?
Yes. Any entry that praises or names a worker is swapped, since their records are personal.