Staff-record anonymisation is the removal of personal details from a clinician’s HR file. Health and occupational information is special-category under UK GDPR Art. 9. anonym.plus does this on a local device, so it no longer names the worker.
When this applies
An HR file holds a clinician’s name, ID, and health notes. To study rota patterns or sickness trends, you can anonymise it and drop the legal-basis burden.
How anonym.plus handles it
- Open the HR file in anonym.plus on a local device.
- Local OCR reads any scanned pages first.
- It flags the worker’s name, ID, contacts, and health notes.
- Turn the reversible map off so no re-link key is kept.
- Swap each detail for a non-reversible label.
- Save the result. The source never leaves your machine.
What you need to provide
- The HR file (DOCX, PDF, TXT, or scan).
- Replace, with the map off for full anonymity.
- Optional language setting for Welsh or other supported tongues.
Patient data entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Staff | PERSON | Dr. Ingrid Davies → [CLINICIAN] |
| Staff ID | ID | employee no. 20471 → [EMP_ID] |
| Dates | DATE_TIME | appointed 09/2019 → [DATE] |
| Identifiers | NATIONAL_ID | NI No. AB 12 34 56 C → [ID] |
| Contact | EMAIL_ADDRESS | i.davies@example.nhs.uk → [EMAIL] |
| Location | LOCATION | 12 High Street, Leeds → [ADDRESS] |
Compliance achieved
- Strips UK GDPR Art. 9 special-category staff information.
- True anonymity puts the result beyond the Act by Recital 26.
- On-device work keeps the dossier under your organisation’s control.
Anonymise staff records offline — see plans & start free →
Limitations & cautions
An HR file holds rich detail. Even with the name gone, a rare role at one small site can re-identify a worker. Apply the motivated-intruder test and keep no key before you call the output anonymous.
Frequently asked questions
Is employee information special-category under UK GDPR?
Health and trade-union records in an HR file are special-category under Art. 9. Other fields are still personal. Making it anonymous lifts those duties for a second use.
Anonymous or pseudonymous — which do I get?
Keep a key to re-link and the output is pseudonymous, still in scope. Turn the key off and, with low residual risk, Recital 26 takes it out of scope.
Does it read Welsh-language documents?
Yes. Multiple languages are supported, which matters for correct name and date detection.