Wellbeing programme record redaction is the removal of medical data from a participation file for an employee wellbeing scheme. The data is special category under UK GDPR Art. 9, and the Equality Act 2010 guards against using it to disadvantage a disabled worker. anonym.plus marks each item on your device, so the record stays usable while protected detail goes.
When this applies
A wellbeing file may capture a clinical questionnaire, a biometric reading, and a name. You strip the medical detail under Art. 9 before any aggregate analysis runs.
How anonym.plus handles it
- Open the participation file in anonym.plus on your device.
- Local OCR reads a scanned screening questionnaire.
- The tool flags clinical notes, readings, and names.
- Keep the de-identified totals an analyst needs.
- Swap or black out the confirmed items.
- Save the clean copy locally.
What you need to provide
- The participation file (PDF, DOCX, scan, CSV).
- An operator (Replace keeps the totals readable).
- Optional batch for a programme-wide set.
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | participant N. Boateng → [PARTICIPANT] |
| Health | MEDICAL_CONDITION | clinical note → [CONDITION] |
| Health | MEDICAL_CONDITION | BMI reading → [METRIC] |
| NI number | UK_NINO | QQ 60 22 44 B → [NINO] |
| Dates | DATE_TIME | screen 02/2026 → [DATE] |
| Contact | EMAIL_ADDRESS | n.boateng@example.co.uk → [EMAIL] |
Compliance achieved
- Treats clinical readings as special category data under UK GDPR Art. 9.
- Guards against disadvantage under the Equality Act 2010 by minimising medical data.
- Offline work keeps protected data off any server.
Anonymise wellbeing programme records offline — see plans & start free →
Limitations & cautions
A rare clinical note can still point to a person even after the name goes. The tool flags named items, yet you should review free-text history before any analysis and share only de-identified aggregates.
Frequently asked questions
What does the Equality Act add here?
It guards against using medical data to disadvantage a disabled worker. Minimising that detail before analysis reduces the risk, and anonym.plus flags such notes.
Can wellbeing data still be analysed?
Yes, in aggregate. Allow-list de-identified totals while names and clinical notes are removed.
Is the file uploaded?
No. The app is fully offline, so protected data stays on your device.