Export anonymisation is the removal of personal data from a patient portal download (CSV, JSON, or a bundle). The NHS Data Security & Protection Toolkit sets the standard for handling such data. anonym.plus anonymises it on your own device, off the cloud.
When this applies
A portal lets patients pull their own records, messages, and results into one download. For analytics that file must be stripped of identity first.
How anonym.plus handles it
- Point anonym.plus at the download folder on your server.
- It scans identifier columns and any free-text fields.
- Steady labels keep links across joined rows intact.
- Review the summary and tune the column rules.
- Save the clean dataset on your device for later.
What you need to provide
- The download as CSV, JSON, or a file bundle.
- A column map for known identifier fields.
- Replace with a steady label map to keep joins.
Patient data entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | account name → [PATIENT] |
| Contact | EMAIL_ADDRESS | portal email → [EMAIL] |
| Identifiers | USERNAME | login handle → [HANDLE] |
| Dates | DATE_TIME | login date → shifted [TIME] |
| Network | IP_ADDRESS | access IP → [IP] |
| Record IDs | MEDICAL_RECORD_NUMBER | NHS number → [NHS_NUMBER] |
Compliance achieved
- Meets the NHS DSP Toolkit by keeping data off the cloud.
- Supports full anonymisation once all identifier types are removed.
- Keeps row links steady, so the file stays useful for analysis.
Anonymise patient portal exports offline — see plans & start free →
Limitations & cautions
A portal download mixes tidy columns with free-text notes and message bodies. The columns map cleanly; the free text needs the same review as any note. Test a sample before a full run.
Frequently asked questions
Can records stay linkable after the swap?
Yes. A steady label map swaps each identifier the same way, so rows for one person still join while no real identity remains.
Why work locally rather than in the cloud?
Sending raw portal data to a cloud tool is itself a disclosure with data breach risk under the NHS DSP Toolkit. Local work skips that risk.
Does it handle both fields and message bodies?
Yes. Structured columns and free-text message bodies in the bundle are both supported.