Contact tracing record redaction is the removal of identifiers from an exposure log, where the health entries are special category data under UK GDPR Art. 9 and the DPA 2018. Such processing needs a clear condition and tight controls. anonym.plus marks each identifier on your device, so the tracing data stays useful while the people are de-identified.
When this applies
Such a log links workers, dates of exposure, and any symptoms reported. You strip the identifiers Art. 9 guards before a copy is shared.
How anonym.plus handles it
- Open the log in anonym.plus on your device.
- Local OCR reads a scanned tracing sheet.
- The tool flags names, dates, conditions, and phones.
- Confirm each flag and keep neutral count columns.
- Swap or black out the confirmed items.
- Save the de-identified copy locally.
What you need to provide
- The exposure log (PDF, XLSX, or scan).
- An operator (Redact suits a shared log).
- Optional batch for several sheets at once.
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | Joel Pratt → [PERSON] |
| Health | MEDICAL_CONDITION | fever, cough → [CONDITION] |
| Dates | DATE_TIME | exposed 11/03/2026 → [DATE] |
| Phone | PHONE_NUMBER | +44 7700 900778 → [PHONE] |
| EMAIL_ADDRESS | j.pratt@example.co.uk → [EMAIL] | |
| NHS Number | UK_NHS | 415 557 7806 → [NHS_NO] |
Compliance achieved
- Treats the entries as special category data under UK GDPR Art. 9(1), on the public health condition in Art. 9(2)(i) read with DPA 2018 Sch. 1 Pt. 1 para. 3, which expects a health professional or an equivalent duty of confidence.
- Recognises where the notification duty actually sits: a registered medical practitioner and a diagnostic laboratory notify under the Health Protection (Notification) Regs 2010, made under the Public Health (Control of Disease) Act 1984, not the employer.
- Keeps the work-related thread distinct: exposure to a biological agent is controlled under COSHH 2002, and a disease attributable to an occupational exposure can be reportable under RIDDOR 2013 once a written diagnosis exists.
- Supports the impact assessment Art. 35(3)(b) expects and the storage limit in Art. 5(1)(e): a tracing log is a short-life record, so de-identify early and keep the work offline.
Anonymise contact tracing records offline — see plans & start free →
Limitations & cautions
anonym.plus is a de-identification aid, not legal advice. A small site can still expose a person through dates and overlap, so review such logs and confirm your lawful basis under the DPA 2018 with the DPO.
Frequently asked questions
Does this make me compliant under UK GDPR?
The tool removes identifiers on your device. Compliance, including the Art. 9 condition and any DPIA, stays with you as the controller.
Which identifiers does it target?
Names, dates, contact details, NHS numbers, and the health entries themselves. The tool flags those classes for your review.
Is the log uploaded?
No. The app runs locally, so tracing data stays on your device.