Anonymising Police National Computer Record Extracts – UK GDPR-compliant anonymisation per DPA 2018
A Police National Computer (PNC) record extract is a compilation of an individual's full criminal history — arrests, charges, convictions, cautions, and intelligence markers. In 2023, Magistrates' Courts received around 1.3 million cases and the Crown Court around 105,000 cases (HMCTS Criminal Court Statistics 2023). anonym.legal pseudonymises the subject's personal identifiers across PNC printouts, enabling legal teams and custody staff to review criminal history without direct personal-data exposure.
When this applies
This task applies when a PNC record extract is shared with defence solicitors, pre-sentence report authors, or legal-aid auditors who require sight of the full criminal history for case preparation but have no legitimate need to retain the subject's personal identifiers in their working documents; the extract is law-enforcement data under DPA 2018 Part 3.
How anonym.legal handles it
- Upload the PNC extract (PDF, printout scan, or structured text export) to anonym.legal.
- The engine identifies all personal identifiers: full name, aliases, date of birth, PNC identifier, and any addresses held on record.
- Each identifier is pseudonymised consistently across all pages of the extract.
- Offence codes, court outcomes, disposal dates, and intelligence markers are preserved in clear text.
- A reversible mapping table is produced with UK data residency.
- The pseudonymised extract is released for legal or case-management review; originals are restored via the mapping key before submission to court or regulatory bodies.
What you provide
- PNC record extract (PDF, printout scan, or text export)
- Case reference number (to link the pseudonymised output to the correct matter)
Limitations & cautions
- PNC extracts are law-enforcement data processed under DPA 2018 s.45 and Part 3; their disclosure is strictly controlled and unlawful sharing can attract UK GDPR Art. 83 penalties of up to £17.5m or 4% of global turnover. Ensure the recipient holds the appropriate authorisation before sharing even the pseudonymised version.
- Intelligence markers on the PNC may themselves contain sensitive operational information; review sharing decisions with the disclosing force's data-protection officer.
- The tool does not advise on the admissibility or weight of PNC data in court proceedings — obtain specialist criminal-law advice.
- Unlawful procurement of a PNC extract constitutes an offence under s.56 Data Protection Act 2018 (enforced subject access); penalties apply to organisations and individuals alike.
FAQ
Is a PNC extract personal data under UK GDPR or DPA 2018?
PNC data is processed by competent authorities for law-enforcement purposes and falls primarily under DPA 2018 Part 3 rather than UK GDPR. anonym.legal applies pseudonymisation consistent with both regimes.
Can the pseudonymised PNC extract be used in a pre-sentence report?
The pseudonymised version is suitable for drafting and peer-review purposes. The finalised pre-sentence report submitted to court must contain the subject's real identity and must use the re-identified version.
How does the engine handle multiple aliases recorded on the PNC?
Each alias is detected and linked to the same subject record, receiving the same pseudonym. The alias field is preserved to indicate multiple identities were recorded, without disclosing the real names.