Expert Report under CPR Part 35: redact non-party personal data – UK GDPR-compliant anonymisation per CPR Part 35
An expert report is a written opinion served under CPR Part 35 in which an independent expert addresses issues requiring specialist knowledge; anonym.legal pseudonymises third-party references across the report and appendices — according to HMCTS Civil Justice Statistics, over 1.4 million County Court claims were issued in 2023, with CPR Part 35 expert evidence used in thousands of multi-track cases above the £25,000 threshold.
When this applies
Applies when an instructing solicitor or expert is preparing a CPR Part 35 report that cites or incorporates third-party personal data, particularly in medical negligence, personal injury, or financial-dispute matters. The multi-track threshold is above £25,000; reports in those cases often reference dozens of third-party individuals whose personal data warrants protection under UK GDPR.
How anonym.legal handles it
- Upload the draft expert report and any appendices or supporting data schedules.
- anonym.legal identifies personal identifiers — patient names, medical-record numbers, account numbers, addresses — across all documents.
- Each individual is pseudonymised consistently across the report and all appendices.
- Technical and expert opinion, methodology, and conclusions are preserved in full.
- A reversible mapping is stored in an encrypted table with EU data residency.
- The solicitor re-identifies from the mapping key when producing the final version for exchange or filing.
What you provide
- Draft expert report (DOCX or PDF)
- Appendices, data schedules, or source documents annexed to the report
- Party-names allow-list
Limitations & cautions
- The expert's own name and professional qualifications must appear in clear in the served version — do not pseudonymise the expert's identity.
- anonym.legal does not verify compliance with the CPR Part 35 declaration or the overriding duty to the court.
- Medical imaging or scanned records with embedded patient metadata require manual redaction before upload; mishandling such data can attract UK GDPR fines of up to £17.5 million under DPA 2018 s.157.
FAQ
Can anonym.legal process reports from multiple experts in one matter?
Yes, upload reports from all experts in a single session to ensure consistent pseudonyms across all materials. Research shows that multi-expert cases in the Business and Property Courts can involve 3 or more experts.
Does the engine handle statistical or aggregated data in expert reports?
Aggregated data without individual identifiers is preserved as-is. The engine targets personal-identifier fields only, consistent with data-minimisation principles under UK GDPR Article 5(1)(e).
What if the report contains direct quotations from a witness with personal details?
Quotations are treated as running text; if they contain personal identifiers, those identifiers are pseudonymised. According to the ICO Code of Practice on Anonymisation (2021), consistent pseudonymisation within quoted material is acceptable practice.
Related tasks
- Witness Statement under CPR Part 32: pseudonymise third-party identifiers
- Standard Disclosure under CPR Part 31: redact non-party identifiers
- Particulars of Claim: pseudonymise third-party identifiers before drafting review
- Redacted exhibits under CPR Part 31: pseudonymise non-party data in disclosed exhibits