Revalidation de-identification is the removal of personal data from a clinician’s appraisal bundle. The Medical Profession (Responsible Officers) Regulations 2010 give each designated body’s Responsible Officer the statutory footing to evaluate a doctor’s fitness to practise and recommend revalidation to the GMC. DPA 2018 governs the personal data that evaluation generates. anonym.plus runs on your device and keeps the training and scope detail intact.
When this applies
The bundle holds the clinician’s name, GMC registration number, and references, plus patient names in case logs the Responsible Officer reviews. A blinded panel wants the qualifications, not who they belong to.
How anonym.plus handles it
- Load the bundle into anonym.plus on your device.
- Local OCR reads scanned certificates and appraisal forms.
- It flags clinician names, registration numbers, and any patient names.
- Confirm the flags and keep the training detail you need.
- Swap each personal item for a clear label.
- Save the cleaned version. The source stays local.
What you need to provide
- The bundle (PDF, DOCX, or scan set).
- An operator (Replace for blinded panel copies).
- Optional allow-list for royal college and specialty codes.
Patient data entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Clinician | PERSON | Dr. Samuel Osei → [DOCTOR] |
| Registration | MEDICAL_LICENSE | GMC No. 7123456 → [LICENSE] |
| Identifiers | NATIONAL_ID | NI No. AB 98 76 54 C → [ID] |
| Dates | DATE_TIME | qualified 2008 → [DATE] |
| Patient | PERSON | case log: P. Ahmed → [PATIENT] |
| Contact | EMAIL_ADDRESS | s.osei@example.nhs.uk → [EMAIL] |
Compliance achieved
- Supports the Responsible Officer’s evaluation under the Medical Profession (Responsible Officers) Regulations 2010 without exposing the underlying data more widely.
- Meets DPA 2018 and GMC guidance for de-identified reuse.
- Catches registration numbers and NI numbers as unique identifiers.
- Offline work keeps the documents inside your organisation.
Anonymise revalidation files offline — see plans & start free →
Limitations & cautions
The bundle mixes the clinician’s own records with patient names in case logs. Both must go. Scanned appraisal forms lean on OCR, so check that registration numbers were read correctly before you share a blinded copy.
Frequently asked questions
What gives a Responsible Officer authority over revalidation?
The Medical Profession (Responsible Officers) Regulations 2010 designate a Responsible Officer at each body a doctor is connected to, and give them the statutory function of evaluating fitness to practise and making a revalidation recommendation to the GMC. That evaluation itself generates personal data, which DPA 2018 then governs.
Is a registration number personal information?
Yes. It identifies one clinician. For a blinded review you swap it, along with any patient names that appear in case logs the Responsible Officer relied on.
Can I process a scanned appraisal form?
Yes. Local OCR reads scanned pages, so identifiers in image documents are caught, and registration numbers on a scanned certificate are flagged the same way as typed ones.