Controlled Drugs Register Redaction with anonym.plus

Clear IDs from the log while the count and balance stay.

In simple terms, PII redaction is the on-device process of finding and masking personally identifiable information in a document before it is shared.

Register redaction is the removal of patient and staff IDs from a scheduled medicines record. Every Schedule 2 supply must be entered in a register, and each entry names the person supplied. anonym.plus cleans the copy you circulate and keeps the medicine, count, and running balance.

When this applies

A scheduled-medicines register names the patient and the witnessing staff on every line. A diversion review turns on the counts, the balances, and the timing; the accountable officer needs the pattern, not the names.

How anonym.plus handles it

  1. Load the log into anonym.plus on your device.
  2. It finds patient and witness names plus staff IDs.
  3. Dates and badge numbers get flagged across each line.
  4. Confirm the flags; the medicine and count stay as non-IDs.
  5. Black out items for the review, or swap them for analysis.
  6. Save the clean file; the source stays on your machine.

What you need to provide

Patient data entity types detected

Categoryanonym.plus entity typeExample
NamesPERSONpatient column → [PATIENT]
NamesPERSONwitness initials → [STAFF]
DatesDATE_TIME08:00 03/05 → [TIME]
IdentifiersNATIONAL_IDstaff badge → [STAFF_ID]
Record IDsMEDICAL_RECORD_NUMBERentry no. 9921 → [ENTRY_ID]
LocationLOCATIONWard 3 cupboard → [SITE]

Compliance achieved

Anonymise controlled drugs registers offline — see plans & start free →

Limitations & cautions

These logs are tightly tabular. Check that the witness and badge columns are mapped, since initials are easy to miss yet name a person. The medicine, count, and balance stay and are not treated as identifiers. Never redact the statutory register itself — the 2001 Regulations require an unaltered, preserved original; the tool works on an exported copy.

Frequently asked questions

Are witness initials personal data?

Yes. Witness initials and badge numbers name the staff who signed off, so under DPA 2018 s.3(2) they are personal data and get removed. The medicine and count entries stay.

Can I redact the statutory register itself?

No. The register required by the 2001 Regulations must be preserved unaltered. Redact only an exported copy made for a review or an audit.

Can I keep the running balance?

Yes. The medicine, count, and balance stay, so the copy still supports the accountable officer's diversion review.