Current developments
Confidentiality, anonymisation, verification, authentication and translation
Protect patients and colleagues while ensuring that documents can be trusted, verified and understood.
Useful evidence can become unusable if it breaches confidentiality or cannot be authenticated. Remove patient and unnecessary colleague identifiers, preserve the meaning of the document, follow current GMC verification arrangements, and use appropriate authentication and translation for overseas evidence. Keep a controlled verification record.
By the end of this module, you should be able to:
- Apply minimum-necessary anonymisation without damaging evidential meaning.
- Distinguish verification, authentication and translation.
- Build an auditable evidence-control process.
Anonymise before uploading or sharing
Remove patient names, addresses, dates of birth, hospital or NHS numbers and other combinations that could identify a person. Consider rare diagnoses, exact dates, locations and images. Remove unnecessary identifiers of colleagues, learners and complainants; follow the specific GMC and local guidance for the document type.
Anonymisation should not erase the evidence of the applicant’s role, date range, assessment or outcome. Use stable replacement labels where chronology matters. Keep source records only in authorised systems and do not transfer clinical material to personal devices merely for convenience.
- Use minimum necessary information.
- Consider indirect identification.
- Keep source records in authorised systems.
Verification confirms provenance
Verification is assurance from an appropriate person or organisation that evidence is a true representation of the source. Current GMC processes may use verification proformas and do not necessarily require a stamp or signature on every page. Follow the live instructions for the evidence type.
Choose a verifier with legitimate access to the original and authority to confirm it. A verifier does not need to endorse every claim; they confirm provenance. Keep their role, contact details, items verified and date.
- Use current verification forms.
- Confirm access and authority.
- Record the verification trail.
Authentication and primary-source checks
Qualifications and certain overseas documents may require authentication or primary-source verification through a route specified by the GMC. This differs from a local supervisor confirming a workplace assessment. Start early because overseas institutions, archived records and name variations can delay checks.
Ensure names, dates and qualification titles are consistent across identity documents, GMC Online and certificates. Explain legitimate changes and obtain the required supporting records rather than altering documents.
- Identify primary-source requirements early.
- Resolve identity variations.
- Never modify source documents.
Translate accurately
Evidence not in English should use the translation standard specified by the GMC, normally with the original and an appropriate certified translation. The translation must be traceable to the source and translator. A summary by the applicant is not a substitute.
Translation renders language; it does not explain local grade, hospital or assessment context. Add a separate factual context note where needed and label it as the applicant’s explanation.
- Retain original and translation.
- Use the required translator route.
- Explain context separately.
Respect third-party rights and ownership
Portfolio evidence may belong to an employer, university, journal or training body and may contain confidential business, staff or learner information. Confirm that it can be used, extract only what is necessary and follow copyright or access conditions.
Meeting minutes, investigation material and legal advice can be especially sensitive. Do not upload privileged advice or documents restricted by an ongoing process without specialist advice and authority.
- Check permission and ownership.
- Minimise third-party material.
- Protect privileged or restricted information.
Maintain an evidence-control register
For each item record filename, source, date, outcome mapped, confidentiality check, verifier, verification status, translation status and final uploaded version. This prevents an unredacted draft or obsolete version reaching submission.
Apply a second-person confidentiality sample before submission. Where an error is found after upload, seek GMC advice promptly rather than silently replacing or ignoring it.
- Track each control step.
- Use final-version status.
- Act promptly on discovered errors.
Which evidence item would cause the greatest harm or delay if the wrong version were uploaded?
Three takeaways
- 1Confidentiality and provenance are conditions of usable evidence, not administrative extras.
- 2Verification, authentication and translation solve different problems.
- 3A controlled register prevents avoidable submission errors.
Check your understanding
Six questions on Confidentiality, anonymisation, verification, authentication and translation test process and practical judgement. This is educational: it does not assess your health, evidence sufficiency or decide a legal issue.
Recommended workbooks
Use only authorised, anonymised information. These files remain on your device.
Official and professional guidance
Use the current specialty-specific guidance and live GMC instructions at submission.