Confidentiality Guidelines


Anonymised data

Data concerning an individual from which the identity of the individual cannot be determined. The second Caldicott principle is that patient identifiable information should not be used unless absolutely necessary: use anonymised data instead.

In practice, anonymised data should exclude the name, address and full post code, and any other information which when combined with other information likely to be held by or available to the recipent could allow the individual to be identified.

Unique identifiers such as hospital or NHS number should also be excluded if there is any possibility that any recipient of the anonymised data has access to the 'key' to that identifier and could thereby trace the identity of the individual.

Anonymised and aggregated information can only be used for justified purposes. Staff must ensure that individuals cannot be identified from the information.



DISCLAIMER: This site is currently under construction: its content and links may not be accurate.