Expert Report under CPR Part 35: redact non-party personal data – UK GDPR-compliant anonymisation per CPR Part 35
Expert reports served under CPR Part 35 often reference medical records, financial data, or witness accounts that contain personal data about individuals who are not parties; anonym.legal pseudonymises those references across the report and any appendices, enabling the instructing solicitor to share draft reports internally without exposing third-party data unnecessarily before the report is finalised.
When this applies
Applies when an instructing solicitor or expert is preparing a CPR Part 35 report that cites or incorporates third-party personal data, particularly in medical negligence, personal injury, or financial-dispute matters.
How anonym.legal handles it
- Upload the draft expert report and any appendices or supporting data schedules.
- anonym.legal identifies personal identifiers — patient names, medical-record numbers, account numbers, addresses — across all documents.
- Each individual is pseudonymised consistently across the report and all appendices.
- Technical and expert opinion, methodology, and conclusions are preserved in full.
- A reversible mapping is stored in an encrypted table with EU data residency.
- The solicitor re-identifies from the mapping key when producing the final version for exchange or filing.
What you provide
- Draft expert report (DOCX or PDF)
- Appendices, data schedules, or source documents annexed to the report
- Party-names allow-list
Limitations & cautions
- The expert's own name and professional qualifications must appear in clear in the served version — do not pseudonymise the expert's identity.
- anonym.legal does not verify compliance with the CPR Part 35 declaration (see PD 35 paragraph 3.2) or the overriding duty to the court.
- Medical imaging or scanned records with embedded patient metadata require manual redaction before upload.
FAQ
Can anonym.legal process reports from multiple experts in the same matter?
Yes, upload reports from all experts in a single session to ensure consistent pseudonyms across all materials.
Does the engine handle statistical or aggregated data?
Aggregated data without individual identifiers is preserved as-is. The engine targets personal-identifier fields only.
What if the report contains direct quotations from a witness?
Quotations are treated as running text; if they contain personal identifiers, those identifiers are pseudonymised while the quoted content is otherwise preserved.
Related tasks
- Witness Statement under CPR Part 32: pseudonymise third-party identifiers
- Standard Disclosure under CPR Part 31: redact non-party identifiers
- Particulars of Claim: pseudonymise third-party identifiers before drafting review
- Redacted exhibits under CPR Part 31: pseudonymise non-party data in disclosed exhibits