anonym.legal
United Kingdom — UK GDPR & DPA 2018

Expert Report under CPR Part 35: redact non-party personal data – UK GDPR-compliant anonymisation per CPR Part 35

An expert report is a written opinion served under CPR Part 35 in which an independent expert addresses issues requiring specialist knowledge; anonym.legal pseudonymises third-party references across the report and appendices — according to HMCTS Civil Justice Statistics, over 1.4 million County Court claims were issued in 2023, with CPR Part 35 expert evidence used in thousands of multi-track cases above the £25,000 threshold.

When this applies

Applies when an instructing solicitor or expert is preparing a CPR Part 35 report that cites or incorporates third-party personal data, particularly in medical negligence, personal injury, or financial-dispute matters. The multi-track threshold is above £25,000; reports in those cases often reference dozens of third-party individuals whose personal data warrants protection under UK GDPR.

How anonym.legal handles it

  1. Upload the draft expert report and any appendices or supporting data schedules.
  2. anonym.legal identifies personal identifiers — patient names, medical-record numbers, account numbers, addresses — across all documents.
  3. Each individual is pseudonymised consistently across the report and all appendices.
  4. Technical and expert opinion, methodology, and conclusions are preserved in full.
  5. A reversible mapping is stored in an encrypted table with EU data residency.
  6. The solicitor re-identifies from the mapping key when producing the final version for exchange or filing.

What you provide

  • Draft expert report (DOCX or PDF)
  • Appendices, data schedules, or source documents annexed to the report
  • Party-names allow-list

Limitations & cautions

  • The expert's own name and professional qualifications must appear in clear in the served version — do not pseudonymise the expert's identity.
  • anonym.legal does not verify compliance with the CPR Part 35 declaration or the overriding duty to the court.
  • Medical imaging or scanned records with embedded patient metadata require manual redaction before upload; mishandling such data can attract UK GDPR fines of up to £17.5 million under DPA 2018 s.157.

FAQ

Can anonym.legal process reports from multiple experts in one matter?

Yes, upload reports from all experts in a single session to ensure consistent pseudonyms across all materials. Research shows that multi-expert cases in the Business and Property Courts can involve 3 or more experts.

Does the engine handle statistical or aggregated data in expert reports?

Aggregated data without individual identifiers is preserved as-is. The engine targets personal-identifier fields only, consistent with data-minimisation principles under UK GDPR Article 5(1)(e).

What if the report contains direct quotations from a witness with personal details?

Quotations are treated as running text; if they contain personal identifiers, those identifiers are pseudonymised. According to the ICO Code of Practice on Anonymisation (2021), consistent pseudonymisation within quoted material is acceptable practice.

Related tasks

Civil Litigation