Pseudonymising NHS Staff Occupational Health Records – UK GDPR-compliant anonymisation per DPA 2018 Sch.1 Pt.1
NHS staff occupational health records combine employment data with special-category health information — fitness-for-work assessments, mental health support referrals, and musculoskeletal assessments — processed under DPA 2018 Schedule 1 Part 1 for occupational medicine purposes. anonym.legal pseudonymises staff identifiers while preserving fitness-for-work conclusions, workplace-adjustment recommendations, and absence patterns for HR governance and workforce planning.
When this applies
This task applies when occupational health records are reviewed by workforce planning teams, HR governance auditors, or researchers studying occupational health patterns in NHS staff, and those reviewers require the clinical and occupational content but not the identity of individual staff members.
How anonym.legal handles it
- Upload the occupational health records (PDF or DOCX) to anonym.legal.
- The engine identifies staff name, date of birth, NHS employee number, department, and the name of the occupational health physician.
- Each named individual is pseudonymised consistently; fitness-for-work conclusions, workplace-adjustment recommendations, and referral outcomes are preserved.
- Absence duration, adjustment type, and review date are preserved in clear text.
- The occupational health physician's identity is pseudonymised; their professional role and qualification status are preserved.
- A mapping table is produced with UK data residency with HR department access control.
What you provide
- Occupational health assessment report
- Fitness-for-work certification (if separate)
- Any referral correspondence to specialist OH services
Limitations & cautions
- Occupational health records are processed under a separate lawful basis from general patient records; confirm that the DPA 2018 Schedule 1 Part 1 employment condition supports the specific secondary use before processing.
- Fitness-for-work conclusions disclosed to line managers must be the re-identified version — pseudonymised records are not appropriate for direct management use.
- The tool does not advise on workplace adjustment obligations — obtain specialist occupational health and employment law advice.
FAQ
Can pseudonymised occupational health data be used for NHS workforce mental health research?
Pseudonymised occupational health data may be suitable for workforce health research under a governance framework that includes a data access agreement, ethics review, and a data minimisation plan. Consult the Health Research Authority's guidance for NHS staff health data research.
Are mental health referral records within occupational health files pseudonymised separately?
Yes. Mental health referral records within an OH file are identified as particularly sensitive and are pseudonymised with the same consistency as the broader OH record. The clinical substance of the mental health referral is preserved.
Does the tool handle records for bank or agency staff as well as substantive NHS employees?
Yes. Bank and agency staff occupational health records are processed identically. The employment relationship type is preserved in the record while the named individual is pseudonymised.