Deletion confirmation redaction is the removal of personal identifiers from a proof of erasure under GDPR Art. 17. The article grants a person the right to have their data deleted. anonym.plus marks the subject and references on your device, so the record of action survives while the named individual is hidden.
When this applies
An erasure log names the subject, their request ID, and the deleted systems. You strip those identifiers so the evidence can be kept without re-storing the data.
How anonym.plus handles it
- Open the confirmation in anonym.plus on your device.
- The app flags the subject, request ID, and contacts.
- Local OCR reads a scanned acknowledgement.
- Keep the action timestamps and system names.
- Swap or black out the confirmed items.
- Save the clean record locally.
What you need to provide
- The erasure confirmation (PDF, DOCX, TXT, scan).
- An operator (Replace keeps the log readable).
- Optional allow-list for system names you must keep.
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | data subject → [SUBJECT] |
| Identifiers | NATIONAL_ID | request DSR-4412 → [REQUEST_ID] |
| Contact | EMAIL_ADDRESS | subject@mail.com → [EMAIL] |
| Dates | DATE_TIME | erased 06/01 → [DATE] |
| Org | ORGANIZATION | system name → [SYSTEM] |
| Location | LOCATION | subject city → [CITY] |
Compliance achieved
- Documents action under GDPR Art. 17 without re-storing the data.
- Keeps timestamps that prove the erasure happened.
- Offline work keeps the evidence inside your team.
Anonymize deletion confirmations offline — see plans & start free →
Limitations & cautions
A proof of erasure should show that work was done, not re-store the very data just deleted. The app flags named items. Confirm no kept reference rebuilds a link to the subject.
Frequently asked questions
Why redact a confirmation of deletion?
Keeping the subject's identifiers in it would re-store the data Art. 17 told you to erase. Redaction lets you keep the audit trail safely.
What should the record still show?
The timestamps and system names that prove the erasure ran. Allow-list those; the app removes the subject's identifiers.
Is the log uploaded?
No. The app is fully offline, so the file stays on your device.