Dataset anonymisation is the removal of personal data from a mobile-health study collection. UK GDPR Art. 89 permits such data to serve research under safeguards. anonym.plus applies the strongest one — anonymisation — on your device, so the study fields stay usable.
When this applies
A mobile study gathers app events, sensor readings, and survey answers from enrolled participants. To share the collection with partners, identity must go.
How anonym.plus handles it
- Open the study set in anonym.plus on a local device.
- It scans identifier columns and free-text fields alike.
- Sensor readings and survey scores stay in place.
- Swap the personal parts with the map turned off.
- Save the anonymous collection for sharing.
What you need to provide
- The collection (CSV, JSON, or a record bundle).
- Replace with the re-link map off for anonymity.
- Optional column map for participant fields.
Patient data entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | participant name → [SUBJECT_n] |
| Contact | EMAIL_ADDRESS | enrolment email → [EMAIL] |
| Identifiers | ID | device handle → [DEVICE] |
| Network | IP_ADDRESS | sync IP → [IP] |
| Dates | DATE_TIME | enrolment date → shifted [TIME] |
| Free text | LOCATION | diary city → [PLACE] |
Compliance achieved
- Supports scientific reuse under UK GDPR Art. 89 safeguards.
- Anonymisation is the strongest safeguard — see UK GDPR Recital 26.
- On-device work supports UK data residency.
Anonymise mHealth research datasets offline — see plans & start free →
Limitations & cautions
Rich mobile data raises re-identification risk, since dense sensor traces can fingerprint a subject. Coarsen timestamps and location, keep no re-link key, and review rare diary entries before you share the set.
Frequently asked questions
What does UK GDPR Art. 89 allow?
It permits data to be processed for scientific research under safeguards such as data minimisation. Full anonymisation is the strongest such safeguard.
Are the sensor readings kept?
Yes. Readings and survey scores stay. Only the participant fields and free-text clues are removed.
Can subjects stay linkable across visits?
Yes. A steady code map gives each subject one alias, so visits join with no real identity kept.