Procurement anonymisation is the removal of personal information from purchasing files. As an NHS body, a hospital's higher-value contracts fall under the Procurement Act 2023 regime, in force since 24 February 2025, which brings its own transparency and publication duties, and its supplier due-diligence checks are also part of the adequate-procedures defence in Bribery Act 2010 s.7(2). Once the result is truly anonymous, it leaves scope under UK GDPR Recital 26. anonym.plus does this on a local device and keeps the spend detail usable.
When this applies
Purchasing files name buyers, supplier contacts, and approvers, some of which may later need publishing under the Procurement Act 2023 regime. To study spend patterns or share with analysts before that point, you can anonymise them and drop the compliance burden.
How anonym.plus handles it
- Open the file in anonym.plus on a local device.
- Local OCR reads scanned invoices and orders.
- It flags buyer, supplier, and approver names plus contacts.
- Turn the reversible map off so no key is kept.
- Swap each person for a non-reversible label.
- Save the result. The source never leaves your machine.
What you need to provide
- The file (CSV, PDF, DOCX, or invoice scan).
- Replace, with the map off for full anonymity.
- Optional allow-list for SKU and contract codes.
Patient data entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Buyer | PERSON | buyer N. Roth → [BUYER] |
| Supplier | PERSON | rep L. Conti → [CONTACT] |
| Organisation | ORGANIZATION | MedSupply Ltd → [SUPPLIER] |
| Contact | EMAIL_ADDRESS | l.conti@example.com → [EMAIL] |
| Contact | PHONE_NUMBER | +44 161 496 0110 → [PHONE] |
| Identifiers | ID | approver login nroth → [USERNAME] |
Compliance achieved
- True anonymity puts the records outside scope by UK GDPR Recital 26.
- Prepares purchasing data ahead of publication duties under the Procurement Act 2023 regime, in force since 24 February 2025.
- Keeps due-diligence records usable for the Bribery Act 2010 s.7(2) adequate-procedures defence.
- On-device work keeps purchasing records under your organisation’s control.
Anonymise procurement records offline — see plans & start free →
Limitations & cautions
Spend figures are usually safe, but a rare line item plus one named supplier can re-identify a contact after names go. Apply the motivated-intruder test and keep no key before you treat the result as anonymous.
Frequently asked questions
Do NHS procurement records get published?
Higher-value ones increasingly do. The Procurement Act 2023 regime has applied since 24 February 2025 and requires contracting authorities, including NHS bodies, to publish contract information. Anonymising an internal working copy first keeps buyer and supplier-contact names out of any analysis that isn't part of that publication duty.
Is purchasing information personal?
Buyer and contact names are personal under the DPA 2018. Spend figures are not, on their own. Making the records anonymous lifts the duties for a second use.
Can I keep the SKU codes?
Yes. SKU and contract codes sit on an allow-list, so the spend detail is intact while buyer, approver, and supplier-contact names are swapped.