Anonymising HMPPS Prison File Extracts – UK GDPR-compliant anonymisation per DPA 2018
HMPPS prison files aggregate a prisoner's reception records, adjudication history, healthcare notes, and release-planning documentation — collectively constituting a dense store of sensitive personal data under UK GDPR Art. 9 and criminal-conviction data under Art. 10. anonym.legal pseudonymises the prisoner's and third parties' personal identifiers across extracted file sections, enabling legal advisers and researchers to engage with custodial records without unnecessary personal-data retention.
When this applies
This task applies when prison file extracts are reviewed by solicitors preparing judicial review applications, by prison-law researchers, or by quality-assurance auditors examining adjudication and disciplinary records, and those reviewers require the substantive record content but not the named individual's personal identifiers.
How anonym.legal handles it
- Upload the prison file extract (PDF or scan) — this may include reception records, adjudication notices, segregation orders, or release-planning documents.
- The engine identifies the prisoner's name, prison number, date of birth, and any named third parties — co-prisoners, witnesses to adjudications, or named staff members.
- All personal identifiers are pseudonymised consistently; offence descriptions, adjudication outcomes, segregation grounds, and release-plan details are preserved.
- Prison-establishment identifiers are preserved to maintain operational context.
- A reversible mapping table is produced with UK data residency.
- The pseudonymised extract is released for legal or research review.
What you provide
- Prison file extract (relevant sections — reception, adjudication, healthcare, release planning)
- HMPPS subject access response or FOI disclosure (if the extract originates from a DSAR)
Limitations & cautions
- Healthcare sections within prison files contain special-category data under UK GDPR Art. 9 — ensure an appropriate lawful basis for any training or research processing is established independently of this tool.
- Staff names appearing in adjudication records may be operationally sensitive — consult with the relevant prison establishment's data-protection officer before sharing pseudonymised extracts externally.
FAQ
Is a prisoner's file personal data under DPA 2018?
Yes. Prison file data constitutes both personal data and, where it relates to criminal convictions or offences, criminal-conviction data under UK GDPR Art. 10. DPA 2018 Part 3 applies additional restrictions to sensitive processing in the law-enforcement context.
Can a pseudonymised prison file extract support a judicial review application?
Judicial review applications must be filed with the real identities of the parties. The pseudonymised extract is suitable for preliminary legal advice and case preparation; re-identify before filing or lodging with the court.
Are co-prisoner names in adjudication records pseudonymised?
Yes. Named co-prisoners or witnesses to adjudication hearings are detected and pseudonymised with distinct pseudonyms, preserving the adjudication narrative without disclosing real identities.