Form redaction is the removal of personal detail from the registration a patient completes online before a consultation. UK GDPR Art. 13 requires you to explain, at the point of collection, what each field is for. Art. 5(1)(c) adds that you should collect no more than you need. Forms that record a communication or accessibility need also feed the NHS England Accessible Information Standard. anonym.plus swaps the identifiers on your device and keeps the clinical answers for analysis.
When this applies
A web registration captures demographics, contacts, and next-of-kin details in fixed fields. Studying these submissions to improve the flow is a different purpose from booking the appointment. The identifying entries come out before that analysis starts.
How anonym.plus handles it
- Open the submission in anonym.plus on your device.
- It finds demographic, next-of-kin, and contact fields.
- Clinical answers and consent flags stay in place.
- Swap or black out the confirmed personal entries.
- Save the clean submission on your device.
What you need to provide
- The submission (PDF, DOCX, CSV, or JSON).
- An operator: Redact for slim copies, Replace to keep flow.
- Optional field map for your form's layout.
Patient data entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | full name field → [PATIENT] |
| Contact | EMAIL_ADDRESS | contact email → [EMAIL] |
| Contact | PHONE_NUMBER | mobile field +44 → [PHONE] |
| NHS number | NHS_NUMBER | NHS 448 902 6631 → [NHS_NO] |
| Location | LOCATION | home address → [ADDRESS] |
| Dates | DATE_TIME | date of birth → [DOB] |
Compliance achieved
- Supports the collection-time transparency duty in UK GDPR Art. 13.
- Backs the data minimisation principle in UK GDPR Art. 5(1)(c) by cutting fields the analysis never needs.
- Health answers on the form are special category data under UK GDPR Art. 9(1), held on the DPA 2018 Schedule 1, Part 1, paragraph 2 condition.
- Keeps accessibility and communication-need fields usable for the NHS England Accessible Information Standard.
- Next-of-kin entries are treated as a separate person's data, not as part of the patient record.
- Offline work keeps a fresh submission inside your organisation.
Anonymise digital registration forms offline — see plans & start free →
Limitations & cautions
Online forms use custom layouts, so map your fields first or one will slip by. A free-text 'reason for visit' box can hide a name or a place. Review that box as carefully as you would a clinical note.
Frequently asked questions
Are next-of-kin contact details removed?
Yes. A relative named on the form is a data subject in their own right, and they rarely filled the form in themselves. Their name and number are flagged and swapped like the patient's own, which also keeps them out of any analysis set.
How does redaction help with data minimisation?
Art. 5(1)(c) asks that personal data be adequate, relevant, and limited to what the purpose needs. A flow-improvement study needs the answers, not the people. Stripping the identifying fields before analysis is the practical way to show the principle was applied rather than just asserted.
Does it read both PDF and structured submissions?
Yes. Printed PDFs and CSV or JSON exports of the same form both work locally, with local OCR handling scanned pages.