CLAIMS
1. A method of anonymizing data in a surgical robotic system, the surgical robotic system comprising a robot having a base and an arm extending from the base to an attachment for an instrument, the arm comprising a plurality of joints whereby the configuration of the arm can be altered, the method comprising: receiving a data stream captured by the surgical robotic system, the data stream comprising data relating to a surgical procedure and comprising personally-identifiable data; determining one or more personally-identifiable feature in the received data stream; and generating, in dependence on the determined personally-identifiable feature and the received data stream, an anonymized data stream omitting the personally-identifiable data.
2. A method according to claim 1 in which the data stream comprises one or more data channel from a group of data channels comprising: video data received from an endoscope coupled to the surgical robotic system; audio data recorded in respect of a surgical procedure; telematics data corresponding to the surgical robotic system; and state data comprising the state of at least a portion of the surgical robotic system.
3. A method according to claim 2 in which the personally-identifiable feature is determined in dependence on the one or more data channel.
4. A method according to claim 2 or 3 in which the personally-identifiable feature is determined in dependence on a first data channel of the group of data channels, and generating the anonymised data stream comprises modifying a second data channel of the group of data channels.
5. A method according to any of claims 2 to 4 in which the personally-identifiable feature is determined in dependence on a first data channel of the group of data channels, and generating the anonymised data stream comprises modifying the first data channel.
6. A method according to any preceding claim in which generating the anonymised data stream comprises, in dependence on the determined p