Regulatory Submission De-Identification with anonym.plus

Clear patient IDs from submission files while the study data stays.

In simple terms, PII redaction is the on-device process of finding and masking personally identifiable information in a document before it is shared.

Submission de-identification is the removal of patient IDs from documents bound for a regulator. Marketing authorisations are granted under Part 5 of the Human Medicines Regulations 2012, within the framework updated by the Medicines and Medical Devices Act 2021. anonym.plus runs locally and keeps the study results and product data intact.

When this applies

A submission packet holds case write-ups, listings, and tables that name trial participants and investigators. Module 5 of the dossier is where the clinical listings sit — and where personal identifiers pile up.

How anonym.plus handles it

  1. Point anonym.plus at the packet on your device.
  2. It scans listings and free-text write-ups for names.
  3. Subject IDs, dates, and sites get flagged across files.
  4. Confirm the flags; the study and product data stay.
  5. Swap IDs with a steady map to keep subject links.
  6. Save the clean packet; the source stays on your machine.

What you need to provide

Patient data entity types detected

Categoryanonym.plus entity typeExample
NamesPERSONsubject R. Hassan → [SUBJECT]
NamesPERSONinvestigator → [INVESTIGATOR]
Record IDsIDsubject no. 4471 → [SUBJECT_ID]
DatesDATE_TIMEvisit 09 Feb → shifted [DATE]
LocationLOCATIONtrial site 3 → [SITE]
IdentifiersEMAIL_ADDRESSsite@example.com → [EMAIL]

Compliance achieved

Anonymise submission documents offline — see plans & start free →

Limitations & cautions

MHRA GxP expectations and Annex 11 govern your validated record system, not the swap itself. The tool de-identifies a copy of the packet, never the source records you must be able to reconstruct on inspection. Listings mix tidy columns with free-text write-ups, so review the free text as you would any narrative.

Frequently asked questions

Does this make my packet GxP compliant?

No. The MHRA data integrity guidance and Annex 11 cover your validated record and signature system. The tool only de-identifies a copy of the documents for safe handling.

Can subjects stay linkable across files?

Yes. A steady label map swaps each subject the same way, so listings still join while no real identity is left.

Are the study results kept?

Yes. Results and product data are not patient identifiers, so they stay. Only the participant and site identifiers go.