Pseudonymising GP Medical Notes and Referral Letters – UK GDPR-compliant anonymisation per UK GDPR Art. 9
A GP medical note is a clinical record constituting special-category personal data under UK GDPR Article 9(2)(h). According to NHS Digital, over 30,000,000 GP records in England are retained for 8 years under the NHS Records Management Code of Practice 2023. anonym.legal pseudonymises patient identifiers in free-text and structured fields, preserving clinical assessment and referral rationale for secondary review.
When this applies
This task applies when GP notes or referral letters are shared with secondary-care clinicians, medicolegal advisers, or clinical governance teams for peer review, complaint investigation, or benchmarking, and those reviewers require the clinical content but not the patient's identity. The Caldicott Principles — 8 principles, with Principle 8 added in 2020 — govern every disclosure of confidential health information by NHS organisations.
How anonym.legal handles it
- Upload the GP notes or referral letter (PDF, DOCX, or plain text) to anonym.legal.
- The engine identifies patient identifiers in both structured fields and free-text body: name, address, date of birth, NHS number, GP registration number, and family member names mentioned in family history sections.
- Each named individual — patient, named family members, and referring clinician — is pseudonymised consistently throughout the document.
- Clinical assessment, medication history, diagnosis codes, and referral rationale are preserved in clear text.
- A reversible mapping table is produced with UK data residency.
- The pseudonymised note is released for the approved review purpose; re-identification uses the mapping key held by the Data Controller.
What you provide
- GP medical notes or referral letter (PDF, DOCX, or text)
- Any accompanying test results or correspondence naming the patient
Limitations & cautions
- Handwritten GP notes require OCR pre-processing before entity detection; OCR accuracy affects coverage.
- Highly specific clinical details — unusual diagnoses in small communities — may remain re-identifying even with names removed; apply additional care for rare-condition cases.
- The tool does not assess clinical accuracy or medicolegal sufficiency of the notes. Breaches can attract fines of up to £17.5 million or 4% of annual global turnover under DPA 2018 s.157.
FAQ
Are family members mentioned in family history sections pseudonymised?
Yes. Named family members appearing in family history or next-of-kin sections are detected as distinct individuals and each receives a unique pseudonym, preserving the family relationship structure without disclosing individual identities.
Can I pseudonymise a referral letter before sending it to a medicolegal expert?
Yes. This is a primary use case. The pseudonymised referral preserves the clinical narrative the expert requires for opinion while removing identifiers. Ensure you retain the mapping key to re-identify when issuing the final medico-legal report. Under the NHS Records Management Code of Practice 2023, GP records must be retained for 8 years from the end of treatment — the mapping key falls within this retention obligation.
Does the tool handle letters written in a mix of structured and narrative formats?
Yes. The engine detects entities in both table-structured fields (patient demographics blocks) and free-text narrative paragraphs within the same document. According to the ICO's 2021–22 anonymisation guidance, pseudonymised records remain personal data under UK GDPR and must be governed accordingly.
Which Caldicott Principles apply to GP note disclosures?
All 8 Caldicott Principles apply. Principle 1 (justify the purpose), Principle 3 (use minimum necessary data), and Principle 8 (added 2020 — inform patients about uses of their data) are particularly relevant when GP notes are shared with secondary-care or legal reviewers outside the direct care team.