Product Complaint Record Redaction with anonym.plus

Clear complainant IDs while the product and defect detail stay.

In simple terms, PII redaction is the on-device process of finding and masking personally identifiable information in a document before it is shared.

Complaint-record redaction is the removal of complainant and patient IDs from a quality complaint file. EU GMP Chapter 8, as retained in the UK Orange Guide, sets how complaints and quality defects are handled, and serious defects go to the MHRA’s Defective Medicines Report Centre. anonym.plus runs locally and keeps the product, lot, and defect detail.

When this applies

A complaint file names the person who reported a defect and any patient harmed. A trend review and a supplier notification both need the lot and the defect — neither needs the complainant’s home address.

How anonym.plus handles it

  1. Open the file in anonym.plus on your device.
  2. It finds complainant and patient names plus IDs.
  3. Dates, contacts, and addresses get flagged.
  4. Confirm the flags; the product and lot stay as non-IDs.
  5. Black out items for the review, or swap them for trending.
  6. Save the clean copy; the source stays on your machine.

What you need to provide

Patient data entity types detected

Categoryanonym.plus entity typeExample
NamesPERSONcomplainant → [COMPLAINANT]
NamesPERSONpatient harmed → [PATIENT]
DatesDATE_TIMElogged 02 Mar → [DATE]
Record IDsMEDICAL_RECORD_NUMBERcomplaint no. 9F-22 → [COMPLAINT_ID]
ContactPHONE_NUMBER+44 40 555 0190 → [PHONE]
LocationLOCATIONhome address → [ADDRESS]

Compliance achieved

Anonymise complaint records offline — see plans & start free →

Limitations & cautions

EU GMP Chapter 8 and Annex 11 govern your validated record system, not the swap. The tool de-identifies a copy for safe sharing and must not be run on the retained complaint file, which may be needed as evidence. The product and lot stay as non-IDs. A rare defect plus a location could still hint at the complainant, so review unusual cases.

Frequently asked questions

Is the product or lot removed?

No. The product, lot, and defect detail are quality data, not patient identifiers, so they stay. Only the complainant and patient IDs go.

Does this make the file GxP compliant?

No. EU GMP Chapter 8 and Annex 11 cover your validated record system and audit trail. The tool only de-identifies an exported copy for safe handling.

Does redacting affect a DMRC report?

No. A defect that meets the reporting threshold still goes to the Defective Medicines Report Centre in full. The de-identified copy is for internal trending and supplier sharing.