Pseudonymising OASys Offender Management Assessments – UK GDPR-compliant anonymisation per DPA 2018
OASys (Offender Assessment System) reports assess an offender's criminogenic needs, risk of serious harm, and sentence-management requirements across twelve domains. These assessments carry substantial personal data — including health, substance misuse, and family circumstances — classified as both sensitive personal data under UK GDPR Art. 9 and criminal-conviction data under Art. 10. anonym.legal pseudonymises the offender's identifiers to enable quality-assurance review without personal-data retention.
When this applies
This task applies when OASys assessments are reviewed by probation quality-assurance teams, training supervisors, or research bodies analysing risk-assessment methodology, and those reviewers require the assessment data but not the offender's personal identifiers.
How anonym.legal handles it
- Upload the OASys assessment report (PDF or structured export).
- The engine identifies the offender's name, date of birth, CRN (case reference number), and any named third parties — victims, family members, or co-defendants — in the narrative sections.
- All personal identifiers are pseudonymised consistently across the twelve domain sections.
- Domain scores, risk-of-serious-harm ratings, sentence-plan objectives, and intervention recommendations are preserved in clear text.
- A reversible mapping table is produced with UK data residency.
- The pseudonymised assessment is released for quality-assurance or training review.
What you provide
- OASys assessment report (all domains)
- Sentence plan or supervision record linked to the OASys assessment
Limitations & cautions
- OASys data is operationally sensitive — even pseudonymised assessments should be shared only within the authorised training or quality-assurance cohort.
- The tool pseudonymises personal identifiers but does not validate the accuracy of the risk-assessment scores or domain ratings — assessment quality review requires specialist probation expertise.
FAQ
Are victim references in the OASys assessment pseudonymised?
Yes. Named victims appearing in OASys narrative sections are detected and pseudonymised with distinct pseudonyms, preserving the victim-offender relationship context without disclosing real identities.
Can pseudonymised OASys data be used in academic criminology research?
Yes, subject to appropriate ethical approvals, data-sharing agreements with HMPPS or the Probation Service, and compliance with DPA 2018 requirements for research processing. The pseudonymised data satisfies data-minimisation obligations for the research context.
Does the tool handle OASys updates and re-assessments in a longitudinal series?
Yes. Upload the full longitudinal series in a batch; the engine assigns the same pseudonym to the offender across all assessment versions, preserving longitudinal coherence.