Use case · Healthcare providers
Clinical reports for research and teaching without identifying the patient
Keep the clinical content and remove or replace what identifies the patient: name, record number, dates, address and contact details.
The problem
Discharge, emergency and test reports are shared with ethics committees, research groups, teaching staff and suppliers. They are health data, a special category, and the clinical content is exactly what must be kept.
Identifiers (medical record number, health card, dates of birth and admission) appear in headers, tables and free text, often in scanned documents.
What gets anonymized
Combining AI options and your own patterns:
Names of the patient, relatives and practitioners
AI option «GDPR anonymization»
Medical record and health card numbers
Custom pattern with your centre's format
Dates of birth, admission and discharge
AI option «Dates» (or shifting with the «Healthcare» profile)
Address, phone and email
AI option «Addresses» and the [G] Correo electrónico pattern
Photos in image reports
AI option «Images and logos» or a manually drawn zone
Fictitious document
Before and after: discharge report
Fictitious discharge report from a made-up hospital. Patient, record number, health card, dates, address, phone and physician are removed; clinical content remains.
How it was done
- AI options: GDPR anonymization, Dates and Addresses.
- Custom patterns for the record number and health card.
- Diagnosis, course and treatment untouched.
Mock-up image built from a synthetic PDF: it reproduces the selection of the options listed, it is not an engine screenshot.
Templates and features used
«Healthcare» pseudonymization profile
Gender-aware names, shifted dates, structured addresses and masked IDs and phones.
«Research» profile
Keeps the intervals between dates and the ratios between amounts so the analysis still works.
Spreadsheets by column
For Excel or CSV extracts: choose the treatment for each column.
«Audit report (ENS, ISO)» template
Share security audit reports of the centre without personal data.
Regulations that usually apply
- UK GDPR / EU GDPR (Art. 9) and DPA 2018
- Health data are a special category. Pseudonymized data are still personal data; only anonymized data fall outside the GDPR, and research with pseudonymized data needs its own lawful basis and safeguards (Article 89).
- Duty of confidentiality
- In the UK, the common law duty of confidentiality applies alongside data protection law when patient information is used beyond direct care, for example in research or teaching; check NHS and local guidance.
- Spanish National Security Framework (ENS)
- A Spanish public-sector security scheme. Politeia Soft holds an ENS Medium category certification whose scope includes Anonimatum.
- Note
- Guidance only, not legal advice. Deciding what to publish or share, and on what legal basis, is up to the data controller.
Frequently asked questions
Is anonymizing enough to use the report in research?
It depends on the project, its legal basis and the ethics committee opinion. Anonimatum gives you both tools (anonymize, or pseudonymize with a map) to apply your centre's decision.
Do documents leave the EU?
No. Processing and AI run on European Union infrastructure, without external language-model APIs.
Would you rather integrate it into your document management system? See the developer portal
Sharing clinical reports outside the care pathway?
Tell us your formats (discharge, emergency, tests) and we will prepare a demo with equivalent fictitious documents.
Request a demo