Pseudonymising NHS Staff Occupational Health Records – UK GDPR-compliant anonymisation per DPA 2018 Sch.1 Pt.1
An NHS staff occupational health record is a special-category record processed under DPA 2018 Sch.1 Pt.1, combining employment data with clinical information about the NHS workforce of over 1,600,000 staff. NHS RMC 2023 requires retention for 8 years after employment ends; DPA 2018 fines reach £17.5 million or 4% of turnover. anonym.legal pseudonymises staff identifiers, preserving fitness-for-work conclusions and adjustment recommendations.
When this applies
This task applies when occupational health records are reviewed by workforce planning teams, HR governance auditors, or researchers studying occupational health patterns in NHS staff, and those reviewers require the clinical and occupational content but not the identity of individual staff members. Breaches involving NHS staff health data can attract fines of up to £17.5 million or 4% of annual global turnover under DPA 2018 s.157.
How anonym.legal handles it
- Upload the occupational health records (PDF or DOCX) to anonym.legal.
- The engine identifies staff name, date of birth, NHS employee number, department, and the name of the occupational health physician.
- Each named individual is pseudonymised consistently; fitness-for-work conclusions, workplace-adjustment recommendations, and referral outcomes are preserved.
- Absence duration, adjustment type, and review date are preserved in clear text.
- The occupational health physician's identity is pseudonymised; their professional role and qualification status are preserved.
- A mapping table is produced with UK data residency with HR department access control.
What you provide
- Occupational health assessment report
- Fitness-for-work certification (if separate)
- Any referral correspondence to specialist OH services
Limitations & cautions
- Occupational health records are processed under a separate lawful basis from general patient records; confirm that the DPA 2018 Schedule 1 Part 1 employment condition supports the specific secondary use before processing.
- Fitness-for-work conclusions disclosed to line managers must be the re-identified version — pseudonymised records are not appropriate for direct management use.
- The tool does not advise on workplace adjustment obligations — obtain specialist occupational health and employment law advice. Under the NHS Records Management Code of Practice 2023, occupational health records must be retained for 8 years after employment ends.
FAQ
Can pseudonymised occupational health data be used for NHS workforce mental health research?
Pseudonymised occupational health data may be suitable for workforce health research under a governance framework that includes a data access agreement, ethics review, and a data minimisation plan. Consult the Health Research Authority's guidance — the HRA approves around 6,000 research projects per year in the UK, including studies of occupational health in NHS staff. The 8 Caldicott Principles (updated 2013, Principle 8 added 2020) apply to data shared for research purposes.
Are mental health referral records within occupational health files pseudonymised separately?
Yes. Mental health referral records within an OH file are identified as particularly sensitive and are pseudonymised with the same consistency as the broader OH record. The clinical substance of the mental health referral is preserved. According to NHS Digital's Mental Health Act Statistics 2022–23, around 53,000 detention episodes occur in England each year — mental health records in occupational files require the same rigour as clinical records.
Does the tool handle records for bank or agency staff as well as substantive NHS employees?
Yes. Bank and agency staff occupational health records are processed identically. The employment relationship type is preserved in the record while the named individual is pseudonymised. According to the ICO's 2021–22 guidance, pseudonymised records remain personal data under UK GDPR, whether the data subject is a substantive employee, bank worker, or agency staff member.