Social workers: how to anonymize a case file for supervision, training or a report
How social workers retell a case for supervision, training or a report: consistent pseudonyms, generalized details, and what French, German and UK law require.
A social worker often retells a case: in supervision, in a training session, or in a written report. The story can stay useful without naming the family. This guide shows what French, German and UK rules require, and how to change names, dates and places without losing the point of the case.
Case notes hold names, addresses, health details and family history. A supervisor, a trainee or a funder does not need all of it. The rule is simple: share only what the reader needs to do their job. Hide the rest before the meeting or the report goes out.
Why do social workers owe confidentiality?
Confidentiality is a legal duty, not just good manners. In France, social workers hold a secret professionnel under Article 226-13 of the Penal Code. A narrow rule added by the 2007 law on crime prevention lets them share what is strictly needed with colleagues on the same case. In Germany, the Sozialgeheimnis in Section 35 of SGB I protects social data held by youth and welfare offices. In England, Social Work England and BASW both require workers to protect confidentiality and to explain its limits to the people they support.
| Country | Legal basis | What it means for you |
|---|---|---|
| France | Secret professionnel (Penal Code, Art. 226-13), and shared information allowed by the 2007 law on crime prevention | You can discuss a case with colleagues on the same file. Going further needs a real reason. |
| Germany | Sozialgeheimnis (SGB I, Section 35), with a stricter rule for youth welfare work (SGB VIII, Section 65) | Passing on a child's file usually needs consent, or one of a short list of exceptions. |
| England | Social Work England standards, the BASW Code of Ethics, and the Data Protection Act 2018 | Confidentiality is a professional standard. Some social work records are shielded from access requests if disclosure would cause serious harm. |
Why do children's files need extra care?
Children cannot easily judge the risk of their data being shared. Recital 38 of the GDPR says children deserve specific protection for their personal data, since they may not grasp the risks or their own rights. A case file about a child often also names parents, siblings and a school. Masking the child's name is not enough if the rest of the story still points to one family.
How do you pseudonymize a case narrative?
A good pseudonym replaces a name with a fake one and keeps using it. Pick a name once, then reuse it every time that person appears. This keeps the story readable in supervision or training, and stops a reader from wondering if two different labels are actually the same person.
- Give each person a consistent fake name or a role label, such as Mother A or Ms. Example, and use it every time.
- Generalize exact ages into ranges, such as early teens instead of 13.
- Generalize dates into a month or a season instead of a single day.
- Generalize places into a region or a type of town instead of a street.
- Drop rare details a reader could use to single out the family, such as an unusual diagnosis or a one-of-a-kind job.
Take a real note: Jane Example, 34, of 12 Elm Street, brought her son to the clinic on 3 March after a fall. A pseudonymized version keeps the meaning: Ms. Example, in her thirties, brought her son to a local clinic one morning in early spring after a fall. A colleague can still follow the case. A stranger cannot trace it back to one street or one date.
Rewriting a case file by hand takes time, and a missed name can slip into a report. ONYRI Sanitize runs in the browser. Token mode, a Pro feature, replaces each name with the same label everywhere it appears, so a case stays readable in supervision. It does not know what counts as a health detail, a religion or a family situation. Check the preview and add anything missed as a custom rule.
How much anonymization does each use need?
| Use | Typical audience | Minimum anonymization |
|---|---|---|
| Supervision inside your team | A supervisor who already knows the case | Change names. Generalize only the most identifying details. |
| Training a new colleague or student | Someone with no prior link to the family | Pseudonyms, plus generalized dates, ages and places. |
| A written report to a manager or funder | People outside daily casework, sometimes outside the agency | Full pseudonymization, and consider a summary instead of a full narrative. |
| A case study for external training or research | Strangers, possibly published or archived | Strongest anonymization. Combine or invent details so no real family can be traced. |
When do you still need consent or a legal basis?
Pseudonymizing a case for internal supervision usually fits inside your existing legal basis for the file. That basis is often a public task under Article 6 of the GDPR. Sharing a less-anonymized version outside your team is a new use. It can need its own legal basis, or the family's freely given consent. France's CNIL warns that consent is a weak legal basis in social work. Someone who depends on a service rarely feels free to refuse it.
- Ask what the audience truly needs to know, and cut the rest.
- Replace each name with a consistent pseudonym, one per person.
- Generalize ages, dates and places, and drop rare details.
- Check the legal basis for this specific use, not just for the file.
- Get consent when you rely on it, and record that you asked.
None of this makes a case impossible to trace with real effort. It raises the bar so a colleague, a funder or a stranger reading it cannot identify the family by accident. That is often enough, and it is required either way.
Frequently asked questions
Do I need the family's consent to anonymize a case for supervision?
Usually not for internal supervision, since your agency already has a legal basis for the file, such as a public task. Consent matters more once you share the case outside your team, for training or a report. Even then, a freely given consent can be hard to get from someone who depends on your service.
Is changing a name enough to protect a family?
Rarely. A rare detail, such as an unusual diagnosis or the only foster family on a street, can point back to one person. It can do this even without a name. Generalize dates, ages and places too, and drop any detail a reader does not need.
Can I reuse a real case for a training session next year?
Only if you check it again first. A generalized detail can become identifying later, for example if the child's age now matches only one pupil in a small school. Review the pseudonymized version before every reuse, not just the first time.
What about a report to a court or an oversight body?
Courts and some oversight bodies have their own legal right to the full file, so anonymization does not apply the same way. For internal reports, supervision notes and training material, anonymize as this guide describes. Ask your agency's data protection contact when a request falls outside routine practice.
Sources & references
- Professional standards guidance: confidentialitySocial Work England
- The BASW Code of Ethics for Social WorkBritish Association of Social Workers (BASW)
- Regulation (EU) 2016/679 (GDPR), Recital 38: children's personal datagdpr-info.eu (Intersoft Consulting)
- Regulation (EU) 2016/679 (GDPR), Article 6: lawfulness of processinggdpr-info.eu (Intersoft Consulting)
- Data Protection Act 2018, Schedule 3: social work data and the serious harm testlegislation.gov.uk
- Opinion 05/2014 on Anonymisation Techniques (WP216), adopted 10 April 2014Article 29 Data Protection Working Party