ECG Report Anonymisation with anonym.plus

Hide the identifying header while the trace stays untouched.

ECG de-identification is the removal of patient data from the printout under the DPA 2018 and the NHS Code of Confidentiality (common-law duty of confidence). anonym.plus runs it on your own device. The waveform stays, but the header names no one.

When this applies

A teaching set needs a clear rhythm strip. The trace can stay, yet the printed header with the name and date must be hidden first.

How anonym.plus handles it

  1. Open the file (PDF or scan) on your own computer.
  2. Local OCR reads the printed header band.
  3. The tool flags the name, date, and record number.
  4. Check each flag and keep the rate and interval values.
  5. Black out the header fields, or swap them for tokens.
  6. Save the clean copy. The first one stays with you.

What you need to provide

Patient data entity types detected

Categoryanonym.plus entity typeExample
NamesPERSONDavid Okonkwo → [PATIENT_1]
DatesDATE_TIMERecorded 14/09/2025 → [DATE]
Record IDsMEDICAL_RECORD_NUMBERMRN 478200 → [MRN]
AgeAGEAge 58 → [AGE]
SiteORGANIZATIONPapworth Hospital, Cambridge → [SITE]
ContactPHONE_NUMBER+44 1480 830541 → [PHONE]

Compliance achieved

Anonymise ECG printouts offline — see plans & start free →

Limitations & cautions

The header band holds the patient data on most layouts. OCR reads it well when the print is crisp. Faded thermal paper can be hard to read, so verify the result.

Frequently asked questions

Does the waveform itself carry any patient data?

The trace is just a signal. The risk sits in the header text. The tool hides that band while the trace stays whole.

Will heart rate and intervals be kept?

Yes. Those are clinical numbers, not identifiers. They are left in place so the strip still teaches the rhythm clearly.

Can I keep tracings from one person linked?

Yes. A name map gives the same individual one stable token across files. Serial strips stay grouped with no real name shown.