How to anonymise a reflective account without breaching confidentiality
Reflection is a professional requirement. So is confidentiality. The two sit side by side in every UK regulator's expectations, and for good reason. A reflective account is meant to capture what you learned from real practice, which usually means writing about a real person and a real event. The skill is to keep the learning while removing anything that could identify anyone involved.
This guide explains what counts as identifiable information, why it matters, and gives you a repeatable method with a before and after example.
Why confidentiality matters in a reflective account
Your duty of confidentiality does not pause when you sit down to reflect.
For nurses, midwives and nursing associates, the NMC Code sets out section 5, 'Respect people's right to privacy and confidentiality', which includes that a person's right to privacy and confidentiality continues after they have died. The NMC's written reflective accounts form is explicit: you must complete it without including any information that might identify a specific patient, service user, colleague or other individual.
For HCPC registrants, standard 5.1 of the Standards of conduct, performance and ethics (effective 1 September 2024) states plainly that you must treat information about service users as confidential.
There is also useful common ground across the professions. A joint statement signed by the UK health and care regulators, including the HCPC and NMC, published in 2019 and titled 'Benefits of becoming a reflective practitioner', says that where reflections are recorded they should be anonymised, and should focus on learning and development rather than the identifiable details of the people, the event or the activity. The same statement offers reassurance that is often misunderstood: regulators will not ask you to hand over your personal reflective notes in order to investigate a concern about you.
Keep one distinction clear. Your private reflective notes are yours. A reflective account that you submit, whether to a confirmer for NMC revalidation or inside an HCPC CPD profile if you are audited, will be read by someone else. That is exactly why it has to be anonymised properly.
What counts as identifiable information
Identifiers come in two forms, and the second is the one that catches people out.
Direct identifiers name a person outright:
- Names, including first names and initials
- Dates of birth, NHS numbers, hospital or case record numbers
- Home addresses or specific contact details
Indirect identifiers do not name anyone, but read together they point to a single person:
- The exact date and time of an event
- The ward, station, clinic or team, especially when combined with your own known place of work
- A rare diagnosis, an unusual injury, or a highly specific set of circumstances
- The job or role of a colleague or relative who would be obvious to others
This combining effect is sometimes called jigsaw identification. No single detail gives the person away, but three or four small ones read together do. A reader who knows where you work, roughly when you were on shift, and one unusual clinical feature can often narrow it down to one individual. Anonymising well means breaking up that jigsaw, not just deleting the obvious name.
The core principle: reflect on your learning, not the person
The strongest protection is also the thing that makes a reflective account good. Move the centre of gravity away from the story of the patient and towards what you did, noticed, felt, decided and changed.
An account that reads like a case report is both weaker as reflection and riskier for confidentiality. An account that reads like an honest record of your own thinking naturally needs far fewer identifying details, because the person is the context, not the subject.
A step by step method to anonymise
- Strip out every direct identifier. Replace names with roles, for example a patient in their seventies, or a colleague from another team.
- Blur time and place. Write 'on a recent shift' rather than a date, and leave out the ward, station, clinic or employer.
- Keep only the clinical detail the learning needs. If a specific figure or diagnosis is not essential to your point, generalise it or leave it out.
- Re-read as a stranger. Ask whether someone who knows where you work could still identify the person from what remains. If they could, remove more.
- Anonymise colleagues and relatives too, not only the patient. The duty covers any identifiable individual.
- Watch for well known events. A serious incident that was widely reported can be identifiable even with no names at all. Reflect on it at a higher level, or choose a different event.
Before and after
Before, too much detail: On my late shift last week on our resuscitation unit, I cared for a man in his mid seventies with a rare inherited heart condition. His daughter, who teaches locally, was very distressed, and I did not explain his prognosis as well as I should have.
After, anonymised: On a recent shift I cared for an older patient with a life limiting condition. A close relative was very distressed, and afterwards I realised I had not explained the situation as clearly as I could have. Here is what I changed in how I communicate difficult news.
The second version keeps the learning, the honesty and the change in practice. It removes the timing, the workplace, the unusual diagnosis and the detail about the relative that, read together, could point to one real person. In a real first draft you would also delete any names, initials or record numbers before you reach this stage.
Higher risk situations
Some settings need a firmer hand. In a small team, a rural service or a specialist unit, the jigsaw comes together faster, so anonymise more aggressively and consider whether the event could be identified from the circumstances alone. Where a patient has died, remember that under the NMC Code the duty of confidentiality continues after death, so the same care applies.
A note on your wellbeing
Many reflective accounts grow out of a shift that was upsetting or that went wrong. Reflection means learning from the event and then setting it down. It is not the same as replaying it over and over, which tends to wear you down rather than move you forward. If an event is still weighing on you, that is worth taking seriously. Your occupational health service and your union are there for exactly this, and the Samaritans are available free at any time on 116 123.
How Reflectory can help
Reflectory interviews you about a real event and produces a reflective account in your own words, ready for your HCPC or NMC portfolio. It screens out identifiable details as you go and builds in the AI assistance disclosure your regulator expects, so you can concentrate on the learning and trust that confidentiality is handled. Your first reflection is free.
Frequently asked questions
Can I write about a patient in my reflective account?
Yes, as long as you anonymise it. Remove anything that could identify the patient, keep only the clinical detail your learning needs, and focus on what you did and changed rather than the person. Both the NMC reflective accounts form and the HCPC standards require this.
Would my regulator read my private reflective notes if I were investigated?
The 2019 joint statement signed by the UK health and care regulators says registrants will not be asked to provide their personal reflective notes to investigate a concern. Accounts you submit for revalidation or CPD audit are different, because other people read them, so they must be anonymised.
Do I need to anonymise colleagues as well as patients?
Yes. The NMC reflective accounts form asks you not to include information that could identify colleagues or other individuals, and your duty of confidentiality is not limited to patients. Use roles rather than names.