ER Case Export De-Identification with anonym.plus

De-identify a case-management export so it no longer points to people.

ER case export de-identification is the removal of personal data from a case-management extract, guided by UK GDPR Recital 26. That recital, with the DPA 2018, sets when data is truly anonymous. anonym.plus marks names and contacts on your device, so the dataset stays useful while people are shielded.

When this applies

An export lists matters with names, dates, and outcomes for analytics. You strip those identifiers under Recital 26 before the dataset is shared.

How anonym.plus handles it

  1. Open the export in anonym.plus on your device.
  2. The app marks names, emails, and IDs in each row.
  3. Built-in OCR reads any scanned attachment.
  4. Turn the alias map OFF for true anonymity.
  5. Swap or black out the confirmed identifiers.
  6. Save the clean dataset locally.

What you need to provide

PII entity types detected

Categoryanonym.plus entity typeExample
NamesPERSONcase subject → [SUBJECT]
ContactEMAIL_ADDRESSuser@example.co.uk → [EMAIL]
DatesDATE_TIMEopened 2025 → [DATE]
IdentifiersUK_NINOQQ 12 34 56 C → [NINO]
LocationLOCATIONEdinburgh office → [LOCATION]
OrganizationORGANIZATIONAcme Ltd → [EMPLOYER]

Compliance achieved

Anonymise ER case exports offline — see plans & start free →

Limitations & cautions

Recital 26 treats data as anonymous only if no one can be singled out under the motivated-intruder test. A rare combination of date, role, and outcome can still point to one person. Aggregate small groups, and keep the alias map off for genuine anonymity.

Frequently asked questions

How do I anonymise an export under Recital 26?

Turn the reversible map OFF and use Redact across the rows. Then check that no rare combination of fields singles out a person.

Can I keep a pseudonym for trend analysis?

Yes, with the alias map on. That is pseudonymisation, still personal data, not the full anonymisation Recital 26 describes.

Is the export uploaded?

No. The app runs locally, so the dataset never reaches a cloud server.