Risk of disclosing patient identifiers was mitigated by removing reference to name, date of birth or NHS number.