Loan-agreement redaction is the removal of borrower financial PII under the Gramm-Leach-Bliley Act. Section 6802 limits sharing of nonpublic personal information, which §6809(4) defines. Section 6801 adds a duty to safeguard it, carried out by the FTC Safeguards Rule (16 CFR Part 314).
When this applies
The file holds account numbers, income, and identity fields. Those are nonpublic personal information, so §6802 limits who may receive them, and Regulation P (12 CFR Part 1016) governs the notice side. You clear them before a servicer sees it.
How anonym.plus handles it
- Load the file into anonym.plus on your device.
- The tool flags the borrower name, account, and income.
- It catches the social and tax numbers as identity fields.
- Confirm the flags and keep the rate and term text.
- Swap or black out the confirmed data.
- Save the clean file on your machine.
What you need to provide
- The credit file (PDF, DOCX, or scan).
- An operator (Redact for slim disclosure copies).
- Optional steady label map across linked schedules.
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | borrower name → [BORROWER] |
| Banking | US_BANK_NUMBER | loan account → [ACCOUNT] |
| Identifiers | US_SSN | 078-05-1120 → [SSN] |
| Pay | MONEY | income → [INCOME] |
| Identifiers | US_ITIN | tax ID → [TAX_ID] |
| Contact | PHONE_NUMBER | borrower tel → [PHONE] |
Compliance achieved
- Removes nonpublic personal information as defined in 15 U.S.C. §6809(4).
- Section 6802 limits sharing; §6801 adds the duty to safeguard.
- Supports the FTC Safeguards Rule (16 CFR Part 314) access controls.
- On-device AES-256-GCM guards the working files.
Anonymize loan agreements offline — see plans & start free →
Limitations & cautions
GLBA covers nonpublic personal information held by a financial institution. The tool removes named account and identity fields. You still judge whether a rare principal amount plus a date could re-identify the borrower.
Frequently asked questions
What counts as nonpublic personal information?
Section 6809(4) covers financial data a customer gives an institution, or that it learns from a transaction. Account numbers, income, and identity fields all qualify.
Does the Safeguards Rule reach my copy of the file?
It reaches customer information a covered firm holds, wherever it sits. 16 CFR Part 314 asks for access controls and encryption; local redaction shrinks what you must guard.
Can the rate and term stay?
Yes. The rate, term, and covenant text stay. Only personal financial fields change.