Contact tracing record redaction is the removal of identifiers from an exposure log, where the health entries are special category data under UK GDPR Art. 9 and the DPA 2018. Such processing needs a clear condition and tight controls. anonym.plus marks each identifier on your device, so the tracing data stays useful while the people are de-identified.
When this applies
Such a log links workers, dates of exposure, and any symptoms reported. You strip the identifiers Art. 9 guards before a copy is shared.
How anonym.plus handles it
- Open the log in anonym.plus on your device.
- Local OCR reads a scanned tracing sheet.
- The tool flags names, dates, conditions, and phones.
- Confirm each flag and keep neutral count columns.
- Swap or black out the confirmed items.
- Save the de-identified copy locally.
What you need to provide
- The exposure log (PDF, XLSX, or scan).
- An operator (Redact suits a shared log).
- Optional batch for several sheets at once.
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | Joel Pratt → [PERSON] |
| Health | MEDICAL_CONDITION | fever, cough → [CONDITION] |
| Dates | DATE_TIME | exposed 11/03/2026 → [DATE] |
| Phone | PHONE_NUMBER | +44 7700 900778 → [PHONE] |
| EMAIL_ADDRESS | j.pratt@example.co.uk → [EMAIL] | |
| NHS Number | UK_NHS | 415 557 7806 → [NHS_NO] |
Compliance achieved
- Treats the health entries as special category data under UK GDPR Art. 9 and the DPA 2018.
- Removes names, dates, contacts, and NHS numbers together.
- Offline work keeps tracing data off any server.
Anonymise contact tracing records offline — see plans & start free →
Limitations & cautions
anonym.plus is a de-identification aid, not legal advice. A small site can still expose a person through dates and overlap, so review such logs and confirm your lawful basis under the DPA 2018 with the DPO.
Frequently asked questions
Does this make me compliant under UK GDPR?
The tool removes identifiers on your device. Compliance, including the Art. 9 condition and any DPIA, stays with you as the controller.
Which identifiers does it target?
Names, dates, contact details, NHS numbers, and the health entries themselves. The tool flags those classes for your review.
Is the log uploaded?
No. The app runs locally, so tracing data stays on your device.